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The  rapidly  developing  technologies  in  navigation,  sensors,  target  identification  sensors,  command 
and  control  and  computation  capability  are  structuring  a command  network  that  demands  increased  functional 
integration  of  crew  station  and  control  configuration  to  permit  effective  use  of  that  technology.  This 
technology,  when  combined  with  advancing  technologies  in  guidance  and  control,  the  driving  forces  of 
acquisition  and  life  cycle  costs,  needs  for  operational  tactical  flexibility,  survivability,  vulnerability, 
and  critical  volume  and  weight  constraints,  dictates  the  need  for  integrated  guidance  and  control  at  a 
higher  functional  level  than  heretofore  considered.  This  higher  functional  level  involves  an  effective 
blend  of  the  sensor,  vehicle  and  kill-mechanism  that  can  provide  a multi-role  capability  for  advanced  and 
present  operational  vehicles.  ~\ 

Cv 

The  papers  presented  herein  definitely  indicate  that  when  one  considers  the  large  array  of  sensors 
available  and  the  fundamental  commonality  of  functions  and  control  algorithms  for  different  missions,  it 
appears  logical  that  these  capabilities  should  be  utilized  to  augment  each  other  to  achieve  flexibility 
and  growth  capability. 
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example,  with  the  increase  in  computation  capability  and  the  ries,  ’here  are  many  surface  motions  and 
response  capabilities  implicit  ix.  the  vehicle  which,  if  tracked  and  in’ • crated,  could  result  in  using  the 
vehicle  itself  as  a s urce  f state  inf -mat  u n.  An  ’her  exam;;  le  is,  the  capability  * integrate  command 
and  runtrol  concepts  int  a vehicle  ix.  a manner  that  updates  the  -r.-bsard  systems  t permit  autonomous 

perati  m with  minimum  -hange  iii  -rew  -p»erati>  n r missi  a * -op;  lisliment.  Similarly,  active  control 

technol  >gy  presently  is  addressing  examinati  n f specific  m -le  -a  pat  i li ties  and  c -j.tr  1 capabilities  of 

these  nodes  for  specific  application,  has  capabilities  that  have  not  been  addressed  t date  such  as, 
pr  vidir.g  in- -ceased  resistance  t vehi-.e  disturbances,  increased  accuracy  f weap  x.s  line  • ntr  1,  and 
intr siucing  d mf riant  ’hange s ir:  Jesit*:.  method-  T gy  t - reduce  vehicle  sice  and  weight.  'perationally,  a 

significant  potential  exis’s  f r the  'apability  ’ provide  a nrulti-r  le  function  f r vehicles  at  very- 

minimal  compromises  such  as,  using  air-*  -air  vehicles  f r air-t  -ground  perations.  fome  aspects  f this 
will  be  addressed  in  more  detail.  Similarly,  task  or  mission  oriented  --r.tr  1 capabilities  are  receiving 
increased  attention  and  ir  vide  distinct  potential  for  defining  -r.tr  1 characteristics  and  dynamics  for 
the  total  mission  guidance  and  control  as  opposed  t the  classical  vehicle  handling  qualities.  These 
principles  will  als > provide  the  methodology  f r definition  :*  degrees  f automati  :.  considering  a total 
pilot  capability  such  as  inf  rr.ati  n requirements,  display  tecliniques,  and  - --x.tr-  : characteristics  for 
s pec  1 f i c rr.i  s s i on  f unc  t i < ins . 

Recent  research  in  the  bi  -medical  field  has  indicated  that  through  appr  priate  sensors,  human 
thought  pr  -esses  and  decisi  -ns  can  be  used  f r - ntr  1 inputs  with  ut  relying  up  -n  limb  operated  manipu- 
lation devices.  Considerable  air  -unts  f pi!  * workload  *.  nsist  f - -nverting  inf  rmation  available  from 
vis-ial,  audio,  and  xr.  * i >n  rues  into  limb  m ♦ i-  : and  associated  integration  required  *o  manipulate  control 

devi-es.  One  example  ■ <ul-i  be  the  entry  f new  c -ordinates  mapping  display  by  tracking  eye  motions 

and  entering  iata  without  any  hand  m-  tion. 

The  advent  f h 1 graphy  and  related  techniques  in  terms  f multi-fun -ti  n displays  can  now  provide 
* h* • -apability  ’ generate  si  tuat  i ~n  and  • -mr.and  inf  rr.-it  ior.  in  three- di mens i.  ::s  thereby  reducing  a 
number  f ii splay  - 'mr-uients  required  by  the  pii'*.  This  will  significantly  re  luce  the  amount  of  inforna- 
t!  ;n  integrati  n the  pil  t has  to  perf  r- , and  i*  -an  be  implemented  in  either  heads-down  'r  heads-up 

• nfigurati  n.  The  new  data  of  graphics  and  the  capability  t - generate  digital  graphic  projection  images 

is  premising  the  capability  to  generate  trajectory,  ground  r terrain  profiles  in  true  time  perspective 
thereby  functionally  providing  a means  >f  generating  synthetic  visibility  for  low  altitude  and  adverse 
weather  operation.  The  area  of  mapping,  though  n.  ‘ directly  related  to  control  technology,  now  provides 

gr  und  positi  -r.ir^r  inf  rmation  that  will  permit  a common  grid  system  with  sufficient  a 'curacy  for  terrain 

mapping  which,  when  • mblned  with  graphics,  has  the  potential  ?f  providing  the  terrain-fol lowing  and 

av  idunce  with  reduced  dependency  upon  terrain-following  radars.  The  increased  capabilities  for  accurate  y 
securing  p«  sition  and  velocity  information  on-board  the  vehicle  through  inertial  sens  r technology  and 
updating  with  satellite  positi  ning  inf  rmatioj.  is  providing  a capability  * • achieve  an  on-board 
time-space  p siM  r.ir.r  capability  which,  when  integrated  with  t.her  sens  i-  inf  m.-c.i  within  tho  ve'.iclo, 

can  minimise  the  criticality  of  continuous  communication  capability  and  substantially  minimize  total  j 

system  dependence  n this  capability. 

This  next  chart  illustrates  that  appropriate  combination  of  these  technologies  offer  potential 
capabilities  that  are  not  recognised  when  examining  individual  technologic:'.  For  example,  the  c o:\bir.at  ion 
f high  computation  capability  with  multi-dinensi  -nal  state  space  control  theory  provides  a gaming 
strategy  for  tactical  perati  ns  plus  increased  maneuvering  capabili *y . Fur*. her  ' -mb i nations  with  optimal 
control  information  and  decision  theory  can  yield  a capability  for  maneuvering  dyn-ir’.-s  with  reduced 
workload  and  substantial  reduct i >n  in  cost. 

Another  thrust  could  be  the  combination  of  sens-  r augmentation  blending  with  active  control  technology 
and  task  oriented  'ontrols.  This  could  achieve  multi-state  control  with  increased  positioning  accuracy 
and  increased  performance  using  full  capability  of  the  six-degree-,  f-froedom  control. 


Ining  • f ■ • i li  I I re  sear  cl  . . ight  L implementation  with  multi- 

function displays  using  holography  and  the  graphics  capability,  yields  a potential  for  generating  terrain 
projections  and  the  medium  for  a synthetic  visibility  capability. 


A;;.:*  ; ' l:.i*  : t.  :*  *:•  a ivan  •••  : «;;!:/  *•  -hr,:;;**  wn  tn«-  ’$  • .r a -y  aval  -abse  ! r<  •’  ti.e... 

a1.’:.  - . ard  r . 1 1 i r.i:.g  ajability  p : tuiute  t.v-  jnpabi  1 1 ty  f creating  & grid  posl  tinning 

. a-  : ■ • , .!,»•  [ : \ li.  -..,1  H'Vun  * ••  f flxel  target  . -at!  n.  It  fu  r’.vr  provide:  an 

, r.  • . ♦!•»••  1:  ; • -apaM  1 l ty.  :-y  re- 'mbinlng  all  those  *- . aments , & : tentfai 

• xi  • f r ■.  r ,:»*vir.g  •-»  true  r.ignr , all-weather  viability  which  i • mpatible  with  the  command  ; .litre  1 
■:./ir  u*d  ht.  t.'  n r.  ..  rap&fcil!  ty  at  -onsiderubly  reduced  : >et  from  attempting  to  d- 

; • x • trt  I . . rai  »•.  • !:  ‘-rrelati  nshlp  between  guidance  uni  -.ntrol,  advanced  techno  I gies 

that  ei  ' • U I ■ pan  ' f a tol  ■ \ • . • • sonclusloi 

■•it.  be  irawr.  : . that  guidance  • ntrol  and  associated  d^i  jmics  is  the  dominant  factor  in  a t tempt - 

f >r .*t  1 1 v integrate  these  element::  it.*  u manner  where  we  -an  utilize  the  teehn  logy  capability 

- . : • • ••  • ■ withh  : sal  limll  tloat  , and  provide  a me  shani  i f r 

redu c i ng  ays  t er:  v a t . 

t vi  nil.:.-  future  being  • :.  *eptually  structured  as  shown  ir.  thin  next  chart  which  indicates 

ntr  will  have  a dominant  r a in  the  functional  tructuring  f advanced  ystea 

• • ■ . ed-  namies,  ntr  th<  and  the  d<  ign  net!  i required  t blend  th< 

nner  that  ai  ff<  lively  . • multi -sei  r input  and  th<  vel  : sle'i 

ivr.arr.i  n : atf  i : ty  t achieve  the  precis!  r.  night,  all-weather  delivery  capability.  This,  then,  can  be 

ented  u Lgit  Information  processed  data  systei  t ■ • • iiscussed  ear 1 ter. 

By  way  f • neluslon,  I w >uld  like  t say  again  that  there  are  many  ether  considerations  in  the 
fi-1  i f guida:  :e  and  control  than  I have  eluded  to  here.  I was  very  impressed  in  looking  over  your 
*.  r gram  f r the  :.*  xt  f ur  day  - Ir.  that  it  addresses  many  f the  areas  discussed  and  projected  future 

• trends.  I realist  that  II  .•  take*  ..  i through  thii  rather  ; • nd  with  very  few  w rds. 
Nevertheless , I feel  that  the  steps  we  are  taking  are  in  the  proper  direction.  I also  think  how  well 

#».  : .r  • • in  designing  tructurii  j th<  • tea  tan  hav<  a very  pr  f effect  n any  m&j  r 

lir/land  battl<  f the  future.  I wish  you  a vt  ry  enj  yal  nd  v<  ry  pr  lu  ti v<  ya \ Lui  thi  week. 

Thank  v . very  murh. 
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ABSTRACT 


in 


Technology  advancements  over  the  past  few  years  now  make  it  possible  to  develop  improved  air-launched 
guided  weapon  systems  where  the  man,  aircraft,  and  weapon  can  be  integrated  to  provide  highly  responsive 
and  effective  capabilities  against  a large  portion  of  the  tactical  target  spectrum  from  standoff  positions 
and  under  adverse  weather  conditions.  These  capabilities  can  greatly  improve  our  aircraft  and  weapon  survi- 
vability while  increasing  sortie  effectiveness.  This  paper  is  mostly  concerned  with  advanced  navigation, 
guidance  and  targeting  technologies  with  emphasis  on  those  systems  that  can  be  integrated  at  a higher 
functional  level  to  improve  tactical  strike  capability  and  hopefully  reduce  life  cycle  costs. 

The  main  threat  that  the  concepts  in  this  paper  address  is  the  massed  attack  of  mobile  targets.  The 
concept  of  using  single  launched  unitary  weapons  against  single  selected  targets  in  a direct  attack  scenario 
is  believed  to  be  highly  ineffective.  Ideally,  a weapon  system  should  be  capable  of  multiple  target  kills 
per  weapon  launched  from  a standoff  range. 

A highly  integrated  "Smart-Package"  concept  is  presented  in  this  paper  showing  how  advanced  imaging 
systems  and  data  processing  techniques  could  be  used  to  develop  an  automatic  system  for  searching,  detecting 
identifying  and  selecting  targets,  and  for  controlling  the  simultaneous  attack  of  a group  of  weapons.  Each 
individual  weapon  of  the  group  launched  would  be  directed  to  a specific  target.  This  approach  could  lead  to 
multiple  kills  per  weapon  system  launched  and  greatly  reduce  the  pilot  work  load. 

Several  weaponization  concepts  are  presented  to  illustrate  optional  applications  of  the  smart-package. 
In  each  case  the  smart-package  is  selecting  targets  in  real  time  as  the  weapon  system  flies  over  the  target 
area. 


There  are  some  technology  voids  in  these  concepts',  namely,  the  data  processing  algorithms  for  false 
target  discrimination  are  not  fully  developed.  Hopefully,  these  problems  can  be  solved  in  the  near  future 
and  the  concepts  presented  here  can  be  further  pursued. 


I.  INTRODUCTION: 

The  current  threat  indicates  that  an  air-launched  guided  weapon  system  capable  of  defeating  a massed 
attack  of  mobile  targets  is  highly  desirable.  The  concept  of  using  single  launched  unitary  weapons  against 
single  selected  targets  in  a direct  attack  scenario  is  believed  to  be  highly  ineffective  since  only  a small 
percentage  of  the  targets  could  be  killed  and  aircraft  attrition  might  be  very  high.  Ideally,  the  weapon 
system  should  be  capable  of  multiple  target  kills  per  weapon  launched  from  standoff  range.  A good  effective 
ness  objective  would  be  to  attack  and  kill  on  the  order  of  ten  targets  per  weapon  launched;  and  since  some 
aircraft  might  carry  several  weapons,  the  sortie  effectiveness  could  be  very  high. 

This  paper  describes  a technical  approach  that  could  be  taken  for  development  of  a system  for  automati- 
cally searching,  detecting,  identifying  and  selecting  targets;  and  for  controlling  the  simultaneous  attack 
of  a group  of  guided  weapons  (missiles). ' The  heart  of  the  system  would  consist  of  mul tispectral  imaging 
sensors  and  real-time  imagery  processors.  Each  individual  weapon  of  the  group  launched  would  be  directed  to 
a specific  target  which  was  selected  from  the  real-time  imagery  processor. 

II.  DISCUSSION  OF  THE  PROBLEM: 

Multiple  and  simultaneous  air-to-surface  attack  of  massed  mobile  targets  using  guided  weapons  is 
believed  to  need  one  of  the  two  following  design  approaches  to  maximize  the  number  of  kills:  (1)  Design 
each  weapon  of  a g~oup  to  be  very  smart  for  target  search,  detection,  identification  and  acquisition;  each 
being  capable  of  rejecting  false  targets  and  communicating  with  all  other  weapons  during  the  attack  to 
prevent  everal  weapons  from  selecting  the  same  target;  or,  (2)  Design  a "Smart  Package"  for  the  delivery 
vehicle  which  can  view  the  target  area  and  collect  high  resolution  data  for  automatic  detection,  identifica- 
tion and  acquisition  of  many  targets  and  can  reject  false  targets.  The  smart  package  would  then  compute  the 
1 ines-of-sight  to  selected  targets  and  direct  a group  of  relatively  simple  weapons  to  individual  targets. 

The  first  of  the  above  design  approaches  is  believed  to  be  a high  technical  risk  and  high  cost  program 
because  of  the  weapon  complexity.  Furthermore,  it  is  probably  not  achievable  to  a satisfactory  level,  due 
to  the  many  problems  associated  with  the  individual  weapons  finding  and  locking-on  different  targets  after 
they  are  launched.  Assuming  that  the  individual  weapons  would  have  either  TV,  IR  or  RF  sensors  capable  of 
search,  detection  and  acquisition,  the  main  design  problems  are  due  to  the  following: 

a.  Unpredictable  formation  of  targets  - This  causes  search  design  problems. 


'This  paper  describes  some  ideas  of  the  author.  It  does  not  represent  a development  committment  of 
the  USAF. 


b.  Spacing  variation  of  targets  * This  causes  instantaneous  f teld-of-view  problems  particularly 
fcr  the  RF  sensors. 

c.  Relative  location  of  targets  at  time  of  launch  - As  a worst  case  this  can  increase  the  aerodynamic 
and  propulsion  demands. 

d.  Wide  variatiofi  of  target  signature  - This  will  tend  to  increase  the  seeker  ( omplen  i t v . 

e.  Passive  countermeasures  - Seekers  must  he  capable  of  recognizing  and  rejecting  and  this  im  n-a 
their  complexity. 

f.  Active  countermeasures  - Same  comment  as  e.  above. 

g.  Natural  false  targets  - Same  problem  as  f. 

h.  Probability  of  several  weapons  selecting  the  same  target  and  insufficient  time  to  select  a not  Met 
target  if  given  the  opportunity  - This  is  highly  probable  if  there  is  no  weapon- to-weapon  communication. 
This  approach  is  believed  to  be  very  expensive  due  to  the  many  function*,  that  each  missile  must  perform 
and  it  is  doubtful  that  it  can  be*  done  at  all  within  tin*  volume  and  weight  constraints  imposed  on  ait 
launched  weapon  systems. 

Ill . ADVANCED  CONCEPTS: 

The  preferred  approach,  and  the  subject  of  this  paper,  is  tin*  single  smart-package  which  could  support 
a group  of  small  and  relatively  simple  guided  weapons.  To  accomplish  this  the  carriage  vehicle  (aircraft, 
missile  or  drone)  would  be  highly  instrumented  with  the  smart-package  to  preselect  targets,  command  lino 
of-sight  information  to  the  small  guided  weapons  and  control  their  launch.  Figure  1 illustrates  the  sub- 
systems of  the  smart-package.  There  should  be  two  imaging  systems  covering  three  spectral  hands  of  intero*. 
One  of  tin*  imaging  systems,  having  high  resolution  would  cover  two  infrared  spectral  bands  ( a s jL(  and 
S-14X(  ) and  the  other,  having  much  less  spatial  resolution,  would  be  a scanner  working  at  about  • iiHz 
Imagery  from  the  sensors  is  converted  to  a digital  format  in  real  time.  A digital  processor  would  analyze 
the  imagery  in  real  time  to  select  targets  that  the  weapons  will  be  directed  to  attack.  A rather  complex 
digital  imagery  processing  program  would  be  developed  containing  the  following  as  a minimum. 

a.  Pattern  Recognition  Algor i thins 

Detection  can  be  enhanced  at  long  range  by  programming  typical  target  patterns  and  correlating 
the  imagery  with  these  patterns.  Areas  to  search  for  more  information  as  range  closes  can  be  selected. 
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b.  Spatial  Frequency  Al<jori  thins: 


Recognition  of  targets  can  be  enhanced  by  programming  target  and  non-target  dimension  algorithms  'j  s 

c . I empora 1 1 requency  A Igor i t hms 

Identification  of  targets  can  be  enhanced  through  a knowledge  of  the  temporal  frequency  content 
which  is  related  to  vehicle  shape  and  edges.  Target  motion  can  he  detected  and  evaluated  with  these 
a Igor  i thins . 

d . Spec  tra  I f requency  A I <jor  i thms 

Additional  recognition  and  identification  confidence  can  he  obtained  through  a knowledge  of  the 
spectral  frequency  signatures  of  vehicles.  Correlations  tor  further  confidence  in  target  selection  can  be 
obtained  from  the  multi -spectral  signatures. 

e.  Counter-countermeasure  logic  : 

Information  from  a,  h,  c,  d,  above  will  allow  algorithms  to  he  developed  to  detect  and  identify 
any  countermeasures  and  natural  false  targets  to  prevent  missiles  from  attacking  them. 

f.  Target  Motion  Algorithm: 

Motion  can  be  detected  in  each  imaging  system  and  this  can  further  assist  to  identify  the  true 

targets . 

false  target  dfscr iminatton  using  the  above  algorithms  is  the  technical  challenge  for  the  sniart- 
packaqe.  This  will  be  a difficult  task  to  accomplish  in  a very  short  time  since  the  ratio  of  false  targets 
to  true  targets  may  he  very  high.  A false  target  "tree"  showing  some  typical  targets  that  an  R1  or  IK 
sensor  might  acquire  is  shown  in  figure  2.  Also  shown  are  the  discrimination  techniques  that  can  he  used 
with  the  appropriate  algorithms  to  reject  these  targets.  Spatial  frequency  discrimination  appears  to  he 
the  most  important  technique  that  can  be  used,  followed  by  spectral  and  temporal  frequency  techniques. 

Pattern  recognition  may  he  the  most  powerful  technique  but  also  the  most  difficult  to  accomplish. 
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As  targets  are  selected  by  the  imagery  processor,  the  1 ines-of -sight  (azimuth  and  elevation  angles) 
to  the  nearest  targets  which  are  within  the  aerodynamic  range  of  the  missiles  are  sent  to  missiles  in  the 
group  to  command  the  seekers  to  "look"  at  the  selected  targets.  Seeker  operational  parameters  such  as 
sensitivity,  f ield-of-view  and  slew  rates  are  programmed  in  the  smart-package  to  he  certain  that  the 
seekers  can  acquire  the  selected  targets  when  they  are  commanded.  The  actual  lock-on  could  he  accomp- 
lished before  launch  if  a system  was  designed  similar  to  that  shown  in  figure  3.  In  this  case,  the 
missiles  would  he  locked-on  and  launched  in  small  groups  following  lock-on  confirmation  as  the  carriage 
vehicle  passes  over  the  target  area.  Figure  4 illustrates  a typical  smart-package  system  concept  for  a 
(jroup  of  missiles. 

In  this  concept  the  missiles  would  not  have  to  he  very  smart.  The  seekers  would  he  simple  trackers 
with  good  tracking  logic  hut  no  target  selection  or  discrimination  logic  since  the  smart-package  in  the 
carriage  vehicle  does  the  target  selecting,  field-of-view  can  he  kept  small  and  high  resolution  imaging 
trackers  would  not  he  necessary.  This  concept  will  greatly  reduce  the  cost  of  the  missiles  and  it  should 
greatly  improve  sortie  effectiveness. 

The  main  problem  with  this  concept  is  not  hardware  technology.  We  have  the  imagery  capability  and 
the  computer  technology.  The  problem  is  t ha t we  do  not  have  sufficient  mul tispectral  target  and  back- 
ground (false  target)  signature  data.  We  need  this  information  so  that  we  can  develop  and  program  the 
algorithms  in  the  imagery  data  processor  for  target  detection,  identification  and  selection. 

This  paper  has  been  prepared  to  indicate  an  approach  for  simultaneous  attack  of  multiple  ground  mobile 
targets.  The  same  concept  of  using  a smart-package  to  manage  group  of  guided  missiles  could  he  used  with 
other  munitions  and  other  delivery  concepts.  Figure  S illustrates  a concept  using  semi-active  laser  guided 
or  beam  rider  weapons  where  the  beams  are  controlled  by  the  smart -package . This  concept  could  lead  to  a 
very  low  cost  missile  hut  it  has  the  disadvantage  of  having  to  illuminate  the  targets. 

Figures  6 and  7 illustrate  a concept  using  self-forging  slugs  (SFS)  that  are  aimed  at  selected  targets 
by  gimbals  which  are  commanded  from  the  smart-package.  This  could  he  a returnable  drone  where  the  STSs 
are  reloaded  for  another  mission.  Figure  8 illustrates  a modular  concept  where  the  smart -package  can  he 
employed  in  different  ways  to  control  several  configurations  of  weapons. 
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IV.  CONCLUSIONS: 

A very  smart  weapon  system,  capable  of  functioning  without  a man-in-the-loop  for  each  target,  is 
believed  to  be  required  for  successful  attack  of  the  threat  envisioned  in  this  paper.  The  smart-package 
approach  should  be  capable  of  autonomous  operation  and  there  appears  to  be  a wide  variety  of  employment 
opt  ions . 
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SUMMARY 

The  Standard  Electronic  Modules  Program  is  a highly 
successful  design  standardization  program  that  is  command- 
ing considerable  attention  within  the  U.S.  Department  of 
Defense  as  a result  of  its  achieving  significant  cost  and 
reliability  results.  This  program  establishes  a rational 
discipline  for  the  development  process  for  military  elec- 
tronic systems  by  providing  families  of  functional  elec- 
tronic modules  which  are  already  developed,  documented, 
and  qualified,  and  for  which  a wide  industrial  base  exists 
Although  this  program  has  been  heavily  oriented  at  re- 
solving system  maintenance  and  logistical  support  problem 
areas,  it  nevertheless  constitutes  a readily  available  and 
highly  effective  "building  block"  approach  for  accomplish- 
ing research  and  development  functions. 


INTRODUCTION 

The  word  "standardization"  to  the  Research  and  Development  scientist  or  engineer, 
brings  fear  of  the  heavy  hand  of  bureaucracy  restricting  design  flexibility  which  is  so 
necessary  in  furthering  advances  in  technology.  Additionally,  it  can  bring  concern  of 
too  rapid  obsolescence  or  too  great  constraint  upon  size,  weight,  and  performance. 

These  factors  must  be  carefully  considered  when  structuring  and  applying  a technology 
program  for  standard  hardware  development.  The  advantages  of  some  standards,  however, 
even  in  the  R&D  phase,  can  be  considerable  when  compared  to  whatever  limitations  they 
may  impose. 

Most  efforts  at  hardware  standards  are  initiated  by  the  hardware  users  who  find  that 
their  logistics  problems  are  overwhelming  and,  consequently,  demand  commonality  of  sup- 
porting components  even  with  restrictions  to  system  capability.  Although  the  purpose  of 
the  Standard  Electronic  Modules  (SEM)  Program  is  to  provide  a much  needed  aid  to  the 
hardware  user,  it  nevertheless  offers  the  R & D designer  a substantial  and  readily  avail- 
able technilogy  base  with  only  very  minor  restrictions. 

Even  when  a major  new  weapon  system  is  developed,  most  of  the  supporting  electronics 
require  no  new  concepts--control  logic,  amplifiers,  and  other  similar  components  can  be 
drawn  from  existing  technology.  The  SEM  Program  provides  a broadly  used,  high  reliabil- 
ity series  of  functional  electronic  components  of  great  flexibility  for  application  to 
new  systems  design.  This  permits  the  designer  to  develop  only  the  components  needed  to 
demonstrate  the  new  principles  and  saves  the  cost  in  time  and  money  needlessly  spent  on 
designing  electronics  not  essential  to  the  proof  of  the  R&D  objective. 

BACKGROUND 

In  following  the  evolution  of  semiconductor  electronics,  one  finds  that  they  typi- 
cally share  a common  life  cycle  (see  Figure  1).  A developer  of  a new  system,  recognizing 
that  a period  of  ten  years  may  be  required  before  significant  use  of  the  system  in  the 
field  occurs  and  that  for  a following  period  of  twenty  years  logistic  support  is  to  be 
needed,  must  make  a decision  on  semiconductor  . ircuits  of  a technology  that  is  a complex 
balance  between  too  early  obsolescence  and  too  high  a development  risk.  This  decision, 
while  of  concern  to  the  R&D  developer,  is  of  paramount  concern  to  the  final  system  hard- 
ware user.  This  situation  ultimately  provided  the  impetus  for  the  establishment  of  the 
SEM  Program  and  offers  a compatible  methodology  for  finally  bridging  the  gap  between  the 
R&D  and  system  user  communities. 
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To  further  facilitate  system  design  application  of  SKM,  a broad  range  o i computer- 
aided  design  software  programs  are  available.  These  programs  range  from  Boolean  logit 
equation  translation,  module  placement  and  wiring  Layout,  to  thermal  design  programs  for 
air  and  conduction  cooling. 


Through  the  employment  of  SKM  and  such  proven  and  widely  available  hardware  and 
software  aids,  the  KM)  development  process  can  indeed  be  simplified,  not  only  in  short- 
ening lead  times  but  also  in  substantially  reducing  cost.  This  is  especially  true  in 
p re p roduc t i on  phases,  where  system  prototypes  become  in  essence  production  hardware,  re- 
quiring minimal  transitional  redesign  for  production.  In  fact,  SKM  and  its  associated 
"building  blocks"  have  become  an  invaluable  tool  for  K&D  by  permitting  the  concentration 
of  resources  upon  research  objectives  rather  than  diverting  them  to  the  more  ordinary 
aspects  of  hardware  development. 

PROGRAM  ORGANIZATION 


The  SKM  Program  is  organized  with  the  Naval  Electronic  Systems  Command  (NAVELEX) 
designated  as  the  Technical  Management  Activity;  the  Naval  Avionics  Center  (NAC), 
Indianapolis,  Indiana,  of  the  Naval  Air  Systems  Command,  serving  as  the  Design  Review 
Activity;  and  the  Naval  Weapons  Support  Center  (NWSC),  Crane,  Indiana,  of  the  Naval  Sea 
Systems  Command,  serving  as  the  Quality  Assurance  Activity.  Th«  Naval  Kle»  tr«*ni*  Systems 
I Arts  as  the  agent  for  the  Chief  of  Naval  Material  in  managing  the  program  within 
the  Department  o t Defense. 


The  Technical  Management  Activity  is  responsible  for  the  operation  of  the  overall 
SKM  Program  and: 


- establishes  SKM  Program  objectives  consistent  with  Department  of  Defense 
and  Navy  standardization  requirements 

- organizes,  implements,  and  controls  program  requirements  necessary  to  meet 
\avv  objectives 


- organizes  and  directs  the  SKM  Program  work  at  field  activities 

- promotes  the  SKM  Program  within  the  Navy  and  sponsors  related  activities. 

The  Design  Review  Activity  has  as  its  primary  responsibility  the  review  and  classi- 
fication of  each  SKM  proposed  for  development.  As  a result,  they  classify  special  or 
standard  SKM  Program  module  key  codes  and  assign  specification  numbers  for  their  devel- 
opment . 

The  Quality  Assurance  Activity  is  primarily  responsible  for  the  qualification  of 
module  designs  and  vendors.  They  establish  and  maintain  SEM  Program  quality  assurance 
requirements;  perform  initial  and  periodic  module  production  qualification  testing;  per- 
form correlation  of  SEM  Program  vendor  test  equipment;  perform  failure  analyses;  and 
compile  SKM  module  reliability  data. 

SEM  PROGRAM  SPECIFICATIONS 

The  mechanical  and  environmental  requirements  for  SF.M  Program  modules  are  specified 
in  documents  which  also  describe  the  electrical,  functional,  and  reliability  requirements 
for  each  module  type.  These  specifications  are  prepared  in  accordance  with  MIL-SVD-1378, 
Requirements  for  Employing  Standard  Electronic  Modules  Program.  The  specifications  for 
SKM  are  prepared  originally  by  the  developer  for  approval  and  control  bv  the  SEM  Program. 
Normally,  they  specify  requirements  for  form,  fit,  and  function  rather  than  detailed 
design  requirements.  This  documentation  technique  permits  module  vendors  to  produce 
modules  without  unnecessary  restrictions  on  components  and  specific  design  details,  as 
long  as  the  functional  requirements  of  the  specification  are  maintained. 

Though  the  details  of  design  are  left  to  the  modulo  developer,  it  is  essential  that 
performance  standards  and  reliability  requirements  be  maintained.  Therefore,  the  basic 
mechanical  configurations  from  which  the  designer  may  choose  are  covered  by  a design 
standard;  Ml  I, -STD-1 389 , Design  Requirements  for  Standard  Electronic  Modules.  This 
standard  also  describes  the  design  requirements  which  will  enable  modules  to  satisfy 
the  quality  assurance  requirements  specified  in  M1I.-M-28787,  General  Specification  for 
Standard  Electronic  Modules. 

In  addition  to  these  standards  and  specifications,  several  other  documents  have 
been  been  prepared  cataloging  available  modules  and  describing  their  function  and  a p p l i - 
r it  ion.  Figure  1 0 shows  the  SF.M  Program  documentation  organization.  Under  the  auspices 
i the  Council  of  NATO  Armament  Directors,  the  AC/b7  is  forming  a Special  Working  Croup 
in  deal  with  the  subject  of  module  standardization.  It  is  anticipated  that  these  docu- 
ments will  be  available  from  that  group. 
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STATUS  OF  THE  SEM  PROCRAM 

As  a result  of  extensive  use  over  the  last  ten  years,  the  SEM  Program  has  evolved  to 
rfhere  it  consists  of  approximately  300  module  types,  with  more  than  four  million  modules 

it  ted  ■ reduction*  To  date,  SEM  Program  modules  have  been  applied  In  over  * ays ten 
applications,  spanning  virtually  every  operating  environment.  Because  of  the  large  number 
it  modules  required  in  already  committed  SEM  Program  systems,  combined  with  an  even  brighter 
future  ter  tile  SEM  Program,  approximately  15  module  vendors  have  become  qualified. 

RELIABILITY  EXPERIENCE  OF  SEM 

The  SEM  Program  quality  disciplines  have  resulted  in  hardware  that  has  demonstrated 
reliability  far  beyond  initial  expectations.  For  example,  on  a particular  shipboard  fire 
control  svstem  which  has  been  deployed  long  enough  to  have  statistical  significance  in 
reliability  results,  digit  a 1 modules  are  demonstrating  a failure  rate  of  less  than  .04  fail- 
ure per  million  hours.  This  is  compared  to  the  original  estimate  of  1.9  failures  per 
million  hours,  and  the  observed  failure  rate  of  similar  module  types  (but  which  do  not 
adhere  t<  the  SEM  Program  disciplines)  of  5,5  failures  per  million  hours.  In  recent 
tests  on  a submarine  sonar  system,  a system  MTBF  (mean  time  between  failures)  of  2,100  hours 
was  demonstrated  compared  to  the  estimated  1,3b  8 hours.  In  this  demonstration,  no  failures 
• -cur  red  among  SEM  Program  modules. 

The  SF.M  Program  has  from  its  inception  emphasized  the  importance  of  reliability  in 
svstem  design.  T>  ensure  its  module  reliability  and  ultimately  system  reliability,  the 
SEM  Program  has  done,  and  continues  to  do,  what  every  module  or  system  designer  should 
do  to  ensure  the  reliability  of  its  product.  First,  it  uses  thoroughly  screened  military 
grade  parts.  Second,  during  the  module  design  phase,  the  designer  is  required  to  address 
reliability  bv  performing  a thorough  reliability  prediction.  Third,  the  SEM  Program 
Quality  Assurance  Activity  (QAA)  requires  that  each  module  be  thoroughly  documented. 

Fourth,  the  design  is  extensively  tested  by  the  SEM  Program  QAA  to  ensure  that  the  module 
specification  is  correct  and  that  the  design  meets  the  specification.  In  line  with  this, 
t.i»  h vendor  who  manufactures  standard  modules  must  be  qualified  by  the  SEM  Program  QAA. 

This  qualification  is  maintained  bv  periodically  submitting  a sampling  of  modules  for 
qualification  testing.  This  ensures  that  the  vendor's  modules  comply  with  the  module 
specifications.  As  can  be  seen,  the  striving  for  reliability  takes  a continuing  effort 
on  the  part  of  the  SEM  Program,  with  commensurate  rewards  occurring  in  the  proven  per- 
formance of  its  modules.  The  total  QAA  effort  requires  a considerable  investment--no  one 
will  argue  this  point;  but  the  payoff  in  improved  systems  availability  far  outweighs  this 


COST  IMPACT  OF  SEM 

Electronic  modules  constitute  more  than  50%  of  system  procurement  costs,  and  thereby 
offer  a fertile  area  for  achieving  cost  reduction  with  SEM.  Combine  this  with  the  poten- 
tial discount  that  can  be  realized  through  large  production  volume  procurements  and  the 
results  are  significant.  Table  1 depicts  typical  discount  rates  as  a function  of  quan- 
tity and  applies  to  all  electronic  modules  as  well  as  most  electronic  components. 


Table  ] 

L.  Typical 

Di  scoun  t 
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No , of 
Items 

0-5 

200 
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1000 
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D i scount 

0% 

10-15% 
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35-50% 

As  indicated,  a production  volume  of  5,000  units  commands  discount  rates  as  high  as  50%. 
This  is  significant,  for  without  attempting  to  standardize  and  create  a production  base 
of  some  consequence,  we  have  been  traditionally  working  at  the  low  end  of  the  curve  with 
the  "one  of  a kinds." 

To  illustrate  how  the  SEM  Program  has  benefitted  a typical  development  program  from 
inter-system  commonality  and  extended  demand,  SEM  Program  costing  data  has  been  compiled 
from  the  Naval  Sea  Systems  Command  AN/BQQ-5  and  AN/BQQ-6  submarine  sonar  development 
programs.  The  AN/BQQ-5  Sonar  development  program  was  initiated  in  1970  and  extensively 
employed  SEM.  A total  of  16,000  modules  were  required  per  system  and  were  comprised  of 
138  module  types.  Twenty-one  standard  types  accounted  for  over  12,000  of  the  16,000  mod- 
ule total.  As  a result  of  the  subsequent  AN/BQQ-6  Sonar  development  program  also  employ- 
ing SEM,  this  program  was  able  to  satisfy  system  requirements  almost  exclusively  with 
existing  modules  which  are  common  to  the  AN/BQQ-5  and  other  Navy  systems.  Consequently, 
the  AN/BQQ-6  Program  needed  to  develop  only  30  new  module  types  to  fulfill  its  system  re- 
quirements. Table  2 presents  a brief  tabulation  of  the  more  obvious  life  cycle  cost  sav- 
ings identified  on  these  two  sonar  programs. 

Table  2.  Savings  Resulting  from  SEM  Commonality 


Amount 

Area  of  Savings  (Thousands) 

Development  $2,580 

Volume  Proc uremen t / Produc t ion  3,069 

Residual  BQQ-5  Modules  330 

Supply  Administration  150 

Spare  Support  1,500 

Total  Savings  Quantified  $7,629 


Savings  shown  here  were  based  on  calculations  for  a limited  number  of  AN/BQQ-5  and 
AN/BQQ-6  systems.  Actual  total  savings  are  significantly  greater  and  relate  to  the  actual 
number  of  systems  as  well  as  additional  savings  in  the  areas  of  training,  testing,  support 
equipment,  and  documentation.  It  should  be  noted  that  these  factors  are  only  the  "tip  of 
the  iceberg"  relative  to  life  cycle  cost  savings  achievable  through  the  use  of  the  SEM 
Program.  Savings  should  go  far  beyond  what  has  been  identified  here  and,  if  the  "obscured" 
items  related  to  logistics  and  long-term  availability  can  ever  be  properly  quantified,  the 
true  life  cycle  cost  savings  for  user  systems  will  be  tremendous. 

SYSTEM  APPLICATIONS 

To  illustrate  the  systems  design  flexibility  of  SEM  and  that  it  is  applicable  to 
virtually  all  system  environmental  platforms,  several  examples  of  SEM  system  applications 
will  be  noted. 

Airborne  Radar  System 

The  Air  Force  has  recently  sponsored  the  development  of  two  separate  radar  systems, 
both  of  which  employed  SEM.  Development  models  of  an  airborne  cargo  aircraft  radar  (see 
SEMR  - Figure  11),  for  the  Air  Force  Avionics  Laboratory,  Wr i gh t -Pa t t e r son  Air  Force  Base, 
and  a Tactical  Weather  Radar  for  the  Electronics  Systems  Division,  Hanscom  Air  Force  Base, 
have  been  delivered  and  are  to  undergo  test  and  evaluation.  In  addition  to  employing 
a significant  number  of  existing  SEM,  both  Air  Force  radar  systems  use  numerous  modules 
originally  developed  by  the  Navy  for  the  "2175  Modular  Radar"  (Prime  Search  Radar)  develop- 
ment program. 
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S K M Radar  System 


Table  3 depicts 
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commonality  of  SEM  among  the  various 
inter-system  commonality  achieved. 
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Table  3.  Radar  SEM  Commonalitv 


"2175" 

TYPE  IC 

AF  SKMR 

AF  FACTICA1 
WEATHER 

No  . 

T vpes 

No. 

Mod  ules 

No  . 

T y p e s 

No  . 

Mod ules 

No  . 

T v p e s 

No. 

M od  ules 

Total  SEM 

6 b 

194 

68 

191 

si 

1 16 

Existing  SEM 

19 

9 3 

1 8 

9 2 

1 7 

6 3 

Candidate  SEM 

4 7 

10  1 

SO 

99 

34 

5 1 

SEM  Common  to 

All  Systems 

23 

98 

2 3 

80 

2 3 

52 

Sonar  Receiver  Set 

The  Raytheon  Company,  Submarine  Signal  Division,  Portsmouth,  Rl,  has  also  recently 
completed  the  development  of  the  AN/BQR-24  Sonar  Receiving  Set  (see  Figure  12).  This 
equipment  is  a computer-based  processing  system  for  use  in  conjunction  with  the  basic 
AN/BQR-13  submarine  sonar.  The  heart  of  the  system  is  the  processing  unit  which  contains 
approximately  1,200  SEM  in  addition  to  memories  and  power  supplies,  and  which  are  all 
contained  in  a standard  Raytheon  cabinet  expressly  designed  for  SEM.  One  significant 
aspect  of  this  program  is  the  building  of  the  first  prototype  unit  in  a production  con- 
figuration in  approximately  12  months.  Raytheon  attributes  this  accomplishment  to  the 
fact  that  SEM  was  used  to  implement  the  design  and  that  the  majority  of  these  modules 
were  already  developed,  qualified,  and  readily  available  to  the  equipment  engineer. 
Raytheon  stated  that  it  would  have  normally  taken  18  to  20  months  to  reach  a production 
configuration  if  new  module  designs  were  used.  After  testing,  the  system  was  sent 
to  sea  where  it  completed  a successful  evaluation.  Because  the  SEM  prototype  unit  was  in 
a production  configuration,  transition  to  manufacturing  did  not  require  another  design 
iteration,  thus  allowing  Raytheon  to  respond  to  a short  production  schedule. 
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Sonar  Receiving  Set 


Airborne  Wr.ipon  Control  System 

Figure  1 1 depicts  an  airborne  weapons  control  system  designed  for  the  As  a i r i ratt  . 
tetal  o t l>  1 SKM  Program  modules  were  utilized  to  implement  this  function,  7 ri ""  of  which  we 
SIM  standards. 

Missile  C ii  i dance  S vs  tern 

Figure  Is  illustrates  a prototype  of  a missile  guidance  system, 
i.  rotmdba  sod  Computer  System 

Figure  IS  illustrates  a groundbased  general  purpose  computer  system  developed  bv  the 
Kavtheon  I'ompanv,  and  which  was  mechanized  entirely  of  SKM. 

BF.NFF  l TS 

As  can  be  seen,  flu*  SFM  Program  is  a thorough  approach  to  instituting  a rational 
discipline  tor  the  development  and  deployment  of  military  electronic  systems.  Bv 
proper  lv  applying  its  principles  and  requirements,  the  SFM  Program  can  benefit  the  follow 
i n g program  p h a s e s . 

Development  Phase 

. •,  t ■•'rtfl.  Availability  of  standard  modules  results  in  a reduction 

in  design  effort,  reduction  of  performance  verification  testing  at  the  module  level,  and 
i reduction  in  the  development  of  documentation  required  to  define  and  support  the  module 

/•«.*.  i . •:•••.»  * tin,  . lead  t ime  is  reduced  since  complete  fund  ional  modules 

and  piece  parts  are  available  with  adequate  documontat ion 


Improved  system  reliability.  The  SEM  Program  has  demonstrated  that  highly  reliable 
hardware  can  be  produced  and  still  be  cost  competitive.  In  addition,  since  the  same 
module  types  are  used  from  system  to  system  (do  not  become  obsolete  after  one  applica- 
tion), they  can  be  continually  improved  through  field  use  performance  and  failure  analyse 
and  appropriate  corrective  action. 


.•••::«*  * G ; pt\  .;<**  k mo  antes.  This  occurs  through  multiple  sources  of  stand- 
ard modules  (competition),  high  volume  production,  and  common  quality  and  process  proce- 
dures. 


Reduced  time  to  volume  production.  Standard  modules  are  readily  available  from  mul- 
tiple sources  which  reduces  or  eliminates  production  tooling  time  and  process  development 
time. 

Operations  Phase 


Figure  15.  Groundbased  Computer  System 


More  realistic  cost  bids  for  system  R&D . By  specifying  use  of  standard  functional 
modules  in  R&D  requests  for  proposals  from  contractors,  the  tendency  for  a contractor 
to  "buy  in"  is  reduced  since  he  cannot  be  assured  of  winning  the  production  follow-on  by 
being  locked  in  with  proprietary  or  insufficiently  documented  hardware. 


Production  Phase 


Reduced  cost  of  test  equipment.  The  module  test  equipment  required  to  support  the 
system  can  be  used  on  other  systems  that  use  common  modules.  This  reduces  the  need  for 
unique  test  equipment  for  each  separate  system. 


Reduced  operations  and  maintenance  costs.  By  reducing  the  number  of  different  module 
types  and  increasing  module  commonality  among  systems,  savings  will  occur  by  a training 
requirements  reduction  due  to  similarity  of  hardware,  reduction  in  the  variety  of  test 
equipment  required,  and  simplified  maintenance  at  all  levels  because  of  the  SEM  "discard 
upon  failure"  maintenance  concept. 


Reduced  logistics  costs.  This  is  probably  the  greatest  advantage  of  the  SEM  Program. 
Use  of  interchangeable  modules  between  systems  reduces  the  number  of  different  spare 
part  types  required  to  be  supported  in  the  logistics  system.  In  addition,  the  complete- 
ness of  the  functional  specifications  and  availability  of  competitive  sources  eases  spares 
procurement  problems  and  lowers  module  cost. 


FUTURE  OF  rHK  SEM  PKOGKAM 


The  future  of  the  SEM  Program  is  dedicated  to  extending  its  applicability  to  a gre 
number  of  military  systems  for,  as  its  applications  base  broadens,  the  benefits  derived 
will  a l s o increase.  For  this  reason,  efforts  are  being  continually  carried  out  to  make 
the  SEM  Program  responsive  to  the  majority  of  users  so  that  it  can  be  applied  to  new 
development  programs. 

Currently,  SEM  K&D  efforts  are  being  directed  toward  extending  the  number  of  com- 
plex digital  functions,  analog  and  communications  functions,  and  developing  higher  dens 
hardware  that  will  be  more  readily  applicable  to  avionics. 

RECOMMENDATION 

We  in  the  R&D  community  should  look  into  the  feasibility  of  applying  not  only  the 
modules  of  the  SEM  Program,  but  also  its  basic  philosophy,  that  being: 

Standardize  on  a limited  number  of  items. 

Do  not  develop  items  for  marginal  increases  in  capability,  and 

Use  functional  specifications  to  encourage  competition  and  avoid  obsolescence 

If  we  can  agree  on  a flexible  and  well-disciplined  foundation  through  the  use  of 
SEM,  it  will  not  only  .1  i d us  in  our  immediate  objectives,  but  will  carry  through  and 
positively  influence  all  the  phases  of  the  system  life  cycle --yielding  not  only  better 
equipment,  but  better  equipment  at  lesser  cost.  By  t h i s approach,  we  can  assure  the 
continued  availability  o f RM>  resources  bv  fulfilling  the  needs  of  the  operational 
cominunit  v-'our  ultimate  customer. 
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Vhe  < oiurpt  ot  i ; HS  l.ulu.tl  missile  guidance  i - di  -c  ussc  -d  t ram  the  st.»!'d:>omt  ot  a,i\.ni  if." 
gained  hv  huh  level  r in  tiorial  integration  between  the  missile  and  a C. HS  equipped  launch  aircraft.  I he 
conflicting  re  j.-.irements  of  high  periormam  e and  1 aw  cost  are  shown  to  he  attained  by  elimination  o'  mis 
sile  guidance  functions  that  can  he  performed  hv  the  aircraft  H.HS  system  and  transferred  to  the  missile 
immediately  prior  tv'  launch.  Vhe  importance  of  integrating  missile  Hi'S  receiver  and  inertial  guidance 
system  measurements  for  achieving  maximum  performance  in  a jamming  environment  is  disc  issed,  as 
well  as  the  filter  form  employe.!  and.  res  iltmg  performance.  I he  unique  operational  advantages  of  this 
rd'S  missile  guidance  system  for  weapon  delivery  are  described,  including  those  gained  by  integration 
with  a CHS  equipped  aircratt. 

1.  INTKODIV  VK'N 

The  NAYS  P \K  V'-lohul  Hositioning  System  o HS'  a satellite  nav  igation  system  designed  to  pro 
vide  highly  accurate  three-dimensional  position  and  velocity  data  to  lsers  anywhere  on  or  near  the  earth. 
I'he  H,  HS  will  consist  o:  a c .-n  s te  1 1 a ! ion  of  satellites,  a ground  control  system,  and  an  unlimited  n mher 
o:  ;sers  aircraft,  ships,  vehicles,  satellites  and  manportables.  Ihe  system  concept  evolved  from  the* 
l nited  States  Air  I-'oree  and  Navy  studies  initiated  in  the  mid-'  P s.  I'he  resulting  developments  l SAF 
Hrogram  i 1 1 > and  Navy  l imation  were  merged  into  NAYSI  AR  C.FS  in  l ) ;. 

\ll  l . S.  \rmed  Servues  are*  pa  rtic  ipati  ng  in  NAYS  l 'AK.  I'SAF  is  the  executive  agency  and  man- 
agers the*  dev  elopment  from  the*  NAYS  l \K  Joint  Hrogram  Office*  of  Air  Force  Space*  and.  Missile  Systems 
Orga  n • ation  m FI  Se*gun»lo.  i alifornia.  Nine*  pa  rticip.iting  N A I'd  nations  have  e*\presse*d  a desire  to 
participate*  m the  OHS  Hhase  ll  Hrogram.  Ha  rt  ic  ipation  will  consist  ot  the*  establishment  of  a NA  I'O 
group  at  tin*  Joint  Hrogram  Office*  in  C alifornia  for  the*  purpose  of  contributing  to  the*  OHS  Hrogram  and 
coordinating  NATO  requirements  and  operational  applications. 

Fundamental  characteristics  e*t  OHS  all  weather,  worldwide  iv  ai  labil  if  v . uns  iturabilit  v . auto:*, 
.liny,  high  a*,  curacy,  and  the-  i.im-resist,iuce  inhe  rent  m spr.-a.i  u'e.inim  modulation  make-  it  an  ittra.  - 
1 1\  «•  i andid.ite  source  of  po  *>  1 1 ion  mg  d.  at  a tor  guid  aiu  e-  of  tactical  air  to  stirl.u  e nus>il«*s.  llowe-v  er,  •>  it-  e- 
missiles  are-  evoeiulalde,  it  is  c--cnti.il  that  a missile  OHS  guidance  system  be-  relatively  inexpensive. 

Ihe-  requirement  tor  low  cost  * an  he-  n-.t  most  ette-.tivciv  through  a system  ..'inept  whi.lt  combine  s a high 
degree-  ot  inte-grat  ion  e'f  the-  aircratt  o HS  system  with  an  etticient  integration  ot  O HS  and.  inertial  sensors 
.>  i -.  -hoard  the-  missile-.  Vhe  tun.  t i.Mial  requirement  s tor  air.  rati  missile-  an.*,  c • H'*  inertial  integration  ate 
iiscuss.'.i  be  iow  . \ system  . otu  ept  which  implements  the-,  tttteg  rut  ion  s and  which  is  . urrentlv  under 

• lev  e-  iopme  ut  by  tin-  l.S.  \ir  Force-  Armament  l aboratorv  at  ! glm  \Fl>,  Florida.  is  ilso  ore  sente-d. 


NAYS  VAR  Ml  OF  A!  FOSIVIONINC  SYS  VFM 

Ihe*  NAYS  T AK  OHS  consists  ot  fhre*e*  -naior  se*gments:  space,  control,  and  user.  I’he*  concept  of 
of*erafu»ti  is  us  follows:  each  s.ifi*llite  conti nuouslv  transmits  pseudo  random  noise  il'KN',  spread  spec 
tram  navigation  signals.  Ihe  signals  carry  information  regarding  the*  satellite*  i»phemendes  and  clock 
behavior.  OHS  users  calculate*  their  position  velocity  in  navigation  coordinates  by  m-ultilate  rating  on  the* 
satellites.  If  the*  users  were  equippe*d  with  precise  clocks  they  could  synchronize  on  file*  HKN  signals  te* 
make  range*  measurements  from  three*  satellites.  I'he  user's  position  would  be*  represented  by  tile*  inter - 
sec  tion  of  three  spheres,  e*ach  centere'd  .it  one*  of  the*  satellites.  Vo  avoid  t!w*  re-<;c.i  rement  for  a precise* 
clock,  the*  multilute  ration  process  is  extended  to  a fourth  satellite.  Vhe  reception  of  four  navi  gat  ionul 
signals  permits  three  independent  range*  difference*  equations  to  be*  forme*.!.  1’hese*  eepiations  mav  be* 
solved  to  calculate*  the-  i nte  r s ec t ion  of  tlire'e*  hyperboloids  ot  involution  which  uniquely  define*  the*  user  's 
pos  i tion. 

In  its  operational  configu  ration,  the*  Cl'S  sate'llite*  ecus  t e*l  1 at  ion  will  consist  o’  I satellite's  in 
three  circular,  .’ 0,  .* dd  km  orbit-  with  inclination  ot  <•  * de-gre-e-s.  V his  sate'llite*  deploy me*nt  ensures  that 
a minimum  of  s-.x  and  an  average  of  nine  satellite's  are  in  view  from  any  point  on  the*  earth,  thus  e*nsuring 
satellite  coverage*  for  three-dimensional  navigation  on  a world-wide*  basts. 

F ach  sate'llite*  transmits  HUN  signals  on  two  carrier  frequenc  u*  s ■ l • ' - MU.*,  terme'.i  l and 
l.’.’  Ml!.*,  termed  l *.  Vhe*  signals  are*  coherently  generated  and  can  be*  used  to  determine*  the  magnitude 

of  ionosphe*ric  signal  propog.ition  de'lay.  Poth  nuv  igution  signuls  ure  mod.il.it e*d  with  a VKN  sequence*  o' 
primary  digits,  culle'd  the*  I'rc.  iston  (IM  code*,  ut  u chipping  rule*  of  Id..’*  mbps.  Vhe*  I'lvN  sequenc  «-  acts 
to  spread  tile*  carrier  bandwidth  to  .’0  Mil  . I j is  further  modulated  with  a 1 . iV  * mbps  i'lear  Acquisi 
tion  (l  M . o.le-,  which  .lids  users  in  gaining  rapid  signal  acquisition,  Other  data,  such  as  ephemeris. 
a re-  p ro\  i.led  at  * 0 bps . 

\ typic  al  OPS  user  se*t  c onsists  of,  an  antenna,  rece*iver,  data  processor  and  control  display 
unit.  Vhe  rece*iver  generates  replicus  of  the  FKN  codes  and  correlate*  them  with  received  satellite 
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signals  to  develop  pseudo- range  and  pseudo  delta  range  nu- .is.imucuis  to  each  of  four  satellites.  1 ho 
processor  then  combines  the  measurement#  with  i omputeil  satellite  position  and  velocity  to  talculatr  the 
user  s th  ree -dimensional  position  and  vehu  itv  in  e.irth-i  entered  i oonluutes. 

The  GPS  is  being  developed  within  a three-phase  program  of  concept  validation,  system  valida 
lion,  and  production.  1 he  corn*  spending  schedule  of  deployment  is  shown  in  l-’igure  1.  1 ho  concep* 

Validation  phase  which  began  in  December  1 '*  * 1 includes  fabrication,  test,  and  evaluation  of  develop 
mental  user  sets,  using  both  a simulation  facility  (the  inverted  range)  at  the  > ima  Proving  i , rounds, 
Arizona,  as  well  as  a validation  constellation  of  satellites.  I'he  constellation  will  be  formed  with  six 
prototype  satellites  plus  spares.  The  first  of  these  prototypes,  NAVSTAU  I.  was  launched  on 
February  33,  1 1 ’s.  Successful  user  equipment  tests  have  already  )>een  ci»nd.  to  ! ising  signals  from 
\AVSTAR  I in  conjunction  with  signals  from  ground  satellite  simulators  at  the  inverted  range.  As  addi- 
tional satellites  are  placed  in  orbit  during  Phase  I.  testing  of  CDS  user  equipment  \\  1 1 1 be  extended  to 
oceanic  test  ranges,  and  tit  Fglin  AFP,  Florida. 

A constellation  of  six  or  more  satellites  will  be  available  throughout  Phase  II.  during  which  sys- 
tem effectiveness  and  supportahilitv  will  be  established.  During  this  phase,  the  control  system  segment 
will  evolve  into  its  fully  operational  configuration,  anti  a final  determination  of  user  equipment  configu- 
ration will  b«*  accomplished.  initial  operational  test  and  evaluation  (lOTIvF)  will  be  conducted  during 
this  phase.  During  Phase  III,  production  satellites  will  be  launched  to  complete  the  full  .’  l satellite 
constellation.  NAYSVAK  Initial  Operational  Capability  (IOC)  will  oct  ur  in  the  mid  - 1 l>  ''O  ’ s. 
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Figure  1.  GPS  Development  Schedule 


II.  MISSII  F C.riPANOF  KFQFIRFMFNTS 

in  considering  the  use  of  GPS  for  tactical  missile  guidance,  it  is  important  to  consider  the  prin- 
cipal attributes  the  system  should  have.  Consider  the  three  design  objectives  identified  in  Figure  3. 

Thev  are:  l)  electronic  countermeasures  (FCM)  resistance:  3'  guidance  unit  cost,  and  >)  performance. 
This  order  is.  in  fact,  the  approved  priority  for  the  guidance  systems  under  development  within  the 
Tactical  GPS  Guidance  Program. 

Traditionally,  design  priorities  for  missile  guidance  systems  have  been  ordered  as  performance, 
unit  cost,  and  FCM  resistance.  The  reason  for  the  interchange  of  performance  and  FCM  resistance  for 
the  GPS  guidance  system  is  that  the  primary  application  is  midoourso  guidance,  where  the  performance 
demands  are  considerably  less,  and  are  dictated  principally  bv  the  acquisition  basket  of  a terminal 
guidance  sensor.  Inherent  CPS  accuracies  not  only  easily  meet  Irrminal  acquisition  requirements,  but 
also  meet  most  terminal  guidance  requirements  for  area  munitions.  On  the  other  hand,  with  the  in 
creased  emphasis  on  vise  of  FCM  in  tactical  warfare,  it  has  become  abundantly  clear  that  considerable 
effort  is  required  to  provide  a high  probability  of  reaching  the  target  area  in  the  face  of  a determined 
de  fense. 

Fnit  cost,  although  second  priority,  is  also  a very  important  factor  in  considering  OPS  for  mis- 
sile guidance,  particularly  for  tactical  missiles.  A significant  reduction  m the  cost  ’complexity  of  the 
current  developmental  airc raft -type  GPS  equipment  of  comparable  performance  is  required  to  be  attrac- 
tive for  the  'throwaway  application  of  tactical  missile  midcourse  guidance.  The  relative  importance  of 
the  three  design  objectives  <f  Figure  3 varies  somewhat  with  the  missile  applica tion.  FCM  resistance 
and  performance  are  emphasized  in  the  long-range  cruise  weapons  such  as  Tomahawk:  whereas,  low 
cost  is  more  important  to  the  shorte  r - range,  low-cost  weapons  such  as  CDF-  \ ' and  W \ \M. 


Figure  . til’S  (iiiidancc  S\  stem  pcsijjn  Obirotivr?. 


IN  1FC.R  A IFD  C.FS  INK  R I I A I 

The  desired  level  of  KCM  resistance  places  several  requirements  on  the  guidance  system  fane  - 
tional  design.  To  begin  with.  the  missile  receiver  (M-Rrceiverl  must  he  designed  for  maximum  anti  ani 
(A.M  capability.  I'his  is  achieved  hv  trucking  the  pseudo  - random  Precision  fl’l  code  signals  and  using 
minimum  acquisition  and  true*  mu  ’andyvidth  s.  However,  velocity  aiding  must  he  s ipplied  to  the  re 
ceiver  to  achieve  these  narrow  handwidths  in  the  face  of  ant  ie  ipafe<i  missile  dynamics.  Aiding  is  also 
essential  to  row  le  for  extrapolation  of  range  and  range -rate  to  the  NAVSTAK  satellites,  permitting 
react]  usition  o'  ( ' 1 'S  signals  following  periods  of  signal  loss.  Secondly,  a pure  inertial  guidance  capa 
hilify  ; s necessary,  us  this  provides  a means  to  continue  to  the  target  acquisition  basket  i!  the  ('l'S  sig 
rials  are  not  regained.  This  capability  is  essential  for  scenarios  where  powerful  iammers  are  collocated 
with  the  target.  1 he  twin  req  lirements  of  receiver  velocity  aiding  and  navigation  without  t'l'S  measure  - 
ments  dictate  an  integrated  (ll'S  ' ine  rtia!  navigation  guidance  system.  \n  integrate*!  system  is  shown 
functionally'  in  Figure 

In  the  closed  guidance  loop  (lower  portion  of  figure!,  the  vehicle  dynamics  are  sensed  by  an 
inertial  measurement  unit.  1’he  measurements  are  then  used  to  perform  inertial  navigation,  providing 
vehicle  position  and  velocity  estimates  which  can  be  compared  to  desired  target  coordinates.  "V  vr 
oners  become  a basis  for  the  generation  of  steering  commands  generated  for  an  autopilot.  In  the  u' 
seine  of  any  other  information,  the  missile  will  perform  with  accuracy  determined  primarily  ''v  the 
quality  of  the  inertial  meas  irement  unit.  Idle  ( ‘ KS  ( lass  M Receiver  provides  additional  independent 
meas u rernents  of  vehicle  position  and  velocity  which  are  compare*!  m a Kalman  filter  with  inertial  de- 
rivations of  like  data.  Differences  in  these  quantities  arc  then  used  to  estimate  both  the  dominant  i'1'S 


Figure  !.  l»KS  l tiiidunce  System  Functional  Design 


I ’ll' 


tomlnanl  Inertial  error  . ntril  iti  r»,  allowing  compensation  lo  the  navigation  comp  tattone. 
integration  of  GPS  ami  inertial  ir formation  via  the  Kalman  filter  is  i ilea l from  a systems  new  point. 
The  r.l’S  receiver  provides  highly  accurate,  long-term  -lata  which  are  used  to  houml  the  growth  of  iner- 
tial errors.  In  fact,  these  lata  can  he  ;sed  to  calibrate  ami  compensate  for  the  principal  errors  of  a 
low-quality  i low  - cost!  inertial  mit,  yielding  Improved  system  navigation  performance.  On  the  other 
hand,  the  inertial  sensors  provide  velocity  liding  to  the  Ol'S  receiver,  improving  its  performance  in  a 
high  Fi‘\l  environment. 


1’ he  integrated  GPS  'inertial  eonvept  results  in  two  distinct  advantages 
vstem.  1 he  inertial  aiding  of  the  ('PS  receiver  coupled  with  the  hounding  of 


meas  irements  allows  formation  of  an  optimal  gtiidanc 


y he  integrated  OPS  ' inertial  concept  results  in  two  distinct  advantages  for  a missile  euida.ua* 

mding  of  inertial  errors  with  GPS 
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guidance  whenc  er  CPS  signals  are  lost  for  any  reason.  In  the  presence  ■■  severe  atnmino.  th 
aide  to  the  target  or  terminal  acquisition  point, 
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lll.  CPS  AIRCRAFT  NAVIGATION  'MlSStl  F GITPANCF  INTFGR  AT  U 'N 

A luunv  h aircraft  with  an  integrated  GPS  inertial  navigation  system  as  a part  of  its  avionics  suite 
offers  unique  advantages  to  the  aircraft  missile  weapon  system.  ’.his  combination  provides  both  in- 
creased operational  flexibility  and  reduced  cost  and  complexity  of  the  missile  CPS  guidance  system. 
Figure  4 illustrates  the  desired  .tire  ra  ft /missile  guidance  system  interface. 


Figure  4.  Desired  Aircraft  Missile  Interface 


A l R C R A F 1'  ' M ISS 1 1 F IN T F R F AG  F 

Two  specific  interfaces  are  required:  l ) an  RF  link  to  carry  GPS  signals  from  the  aircraft 
antennas  to  the*  missile  (superimposed  on  the  RF  link  are  discrete  time  s vnehroni.* ation  signals  to  syn- 
chronize aircraft  and  missile  GPS  receivers,  facilitating  rapid  signal  acquisition!,  and  .1!  a path  for 
digital  initialization  data  from  the  aircraft  GPS  equipment  to  the  missile  guidance  system  via  the  air- 
craft digital  data  bus.  The  significance  of  these  interfaces  to  the  simplification  of  the  missile  CPS  re- 
ceiver  is  mort’  tally  described  below. 

Providing  RF  signals  from  the  aircraft  antennas  yields  two  significant  advantages.  The  first 
advantage  is  that  verification  that  the  missile  guidance  system  is  functioning  properly  can  he  made  prior 
to  weapon  launch.  The  second  is  the  availability  of  higher  signal -to- iammer  reception  of  the  satellite 
signals  hv  the  aircraft  antenna  system  than  van  he  provided  hv  the  necessarily  smaller  and  simpler  mis- 
sile antenna  system.  This  is  an  important  advantage  since  the  missile  receiver  requires  higher  signal 
to  - no  i s e conditions  for  initial  acquisition  ot  the  signal  than  lor  lock  and  track.  Having  once  aeqaired  the 
satellite  signals  and  established  accurate  time  synchronization,  the  missile  receiver  has  the  capability 
to  reacquire  the  satellite  transmissions  after  launch  under  lower  si  gn.il  - to  - iam  conditions.  Additionally 
tracking  before  launch  provides  GPS  measurements  to  the  on-hoard  Kalman  filter  to  allow  alignment  of 
the  strapdown  inertial  guidance  system  and  estimation  of  the  phase  and  frequency  offsets  of  the  missile 
receiver  clock.  When  the  missile  is  launched,  the  guidance  system  loses  the  VWSTAR  signals  for  set 
eral  seconds  until  the  missile  is  clear  of  the  aircraft.  The  guidance  system  then  initiates  a reaequisi- 
tion  of  the  signals.  Kstlmation  and  compensation  for  the  receiver  clock  offsets  reduces  the  uncertainty 
in  reacquisition  timing.  This  allows  reacquisition  with  a narrower  bandwidth  and  consequently  lower 
required  signal-to-noise. 


YttSsM  y uyK  F1YFK  SIMP  l lFU\\lTON< 

The  principle  goal  in  the*  design  of  the  ('1  S missile  g lidancr  svstrm  is  to  achieve  tie*.  ..iu  pe  r - rJ 
forma  > e in  .m  FCM  environment  with  a minimum  cost  of  e , lipment  m the  expendable  missile.  This 
coal  has  Seen  realized  ' v Hughes  in  the  svstem  design  lev  "loped  during  the  laetieal  «.  1 “•  id.»nc«- 
IV\  elopnienf  program  for  the  ' . S.  Air  Force  Armament  ’ aboratorv.  Fglin  AF1;.  In  that  design,  dis- 
. sse  i ' -elovv,  a high  level  of  functional  integration  is  achieve  1 between  the  aircraft  ( I S inertial  navtgu 
ti*  svstem  and  the  missile  v ■ PS  guidance  system.  Specificallv,  the  design  concept  eliminates  functions 
from  the  missile  gaidance  svstem  that  can  he  performed  ; v the  la. inch  aircra’t  and  supplied  to  the  missile 
immediately  prior  to  launch. 

A tvpual  (IPS  receiver  performs  algorithms  which  rnaMe  it  to  select  the  optimum  'oar  satellites 
m track  at  a given  location  and  time:  search,  .ictj  are,  and  fr.n  ••  the  v'le.ir  Acquisition  n A'  code, 
transition  to  search,  acquire  and  track  the  Precision  (1*  code;  demodulate  the  >U  bos  navigation  mes- 
sages to  obtain  ephemeris  and  other  navigation  data;  and.  compare  l.i  '1  a time  of  arrival  to  compute 
ionospheric  propogation  lelay.  To  accomplish  these  tasks,  the  tvnic.il  receiver  design  must  employ 
memory  of  almanac  information  on  the  entire  system  of  24  satellites;  complex  hardware  and  software  t. 
search,  acquire  and  track  both  ( A and  V codes:  phase  tracking  of  the  carrier  to  permit  demodulation 
of  the  •'<)  bps  data;  and  dual  KF  hardware  fo  altow  simultaneous  I \ and  / receiver  operation.  Fig  re  4 
indicates  the  initial  condition  data  that  v an  be  provided  by  the  aircraft  OPS  equipment  to  facilitate  the 
direct  acquisition  and  tr.ic  of  the  satellite  1 code  signals  by  much  simplified  missile  equipment.  The 
t >11  wing  paragraphs  dost  i.be  h.-w  this  si:n,  litigation  is  achieved. 

It  is  presumed  that  the  launch  aircraft  has  acquired  and  is  tracking  the  desired  Cl'S  satellite 
constellation  signals  prior  tv'  launch.  I'v  passing  the  identity  of  the  desired  set  of  satellites  and  the 
parameters  required  to  describe  the  ephemerides  to  the  missile  guidance  system,  the  algorithm  for 
selection  of  the  optimum  combination  of  satellites  and  the  almanuv  describing  the  ephemerides  of  all 
'4  satellites  are  avoided  m the  missile. 

For  the  shorter  range  missiles,  such  as  \ the  ephemeris  parameters  passed  from  the 

aircraft  are  adequate  throughout  light,  eliminating  the  need,  for  a carrier  tracking  loop  capable  of  ex- 
tracting the  '0  \\:  navigation  message  from  the  satellites  signals.  For  longer  'light  times,  such  as  for 
the  cruse  missile,  it  mav  be  necessary  to  change  a satellite  in  the  constellation.  Since  the  satellite 
ephemerides  are  predictable,  the  launch  aircraft  can  anticipate  the  problem  before  la. inch  and  assign 
the  desired  new  satellite  and.  the  time  to  make  the  transition.  The  longer  flight  times  of  the  cruise 
missiles  mav  also  require  ' •'  bps  data  demodulation  during  flight. 

M-Receiver  acquisition  of  the  satellite  signals  is  greatlv  simplified  by  the  aircraft  receiver 
supplying  a precision  timing  mark  on  the  KF  link.  1 his  allows  direct  acquisition  of  the  I'-code  signal, 
eliminating  an  M- Receiver  requirement  to  carry  a v \ code  generator,  which  would  be  needed  to  ac- 
quire the  1.02$  MHz  i'  A code. 

Significant  M Receiver  cost  savings  are  further  achieved  through  the  deletion  of  the  two-froquenc v 
operation,  which  is  used  to  determine  the  ionospheric  nro pog.it ion  delay  bv  time  difference  measurement. 
This  propogation  delay  varies  slovvlv  with  time,  with  a worst-case  time  gradient  of  20  ns  (feet!  per  hour. 
The  apparent  average  gradient  is  at  least  an  order  of  magnitude  less;  thus,  these  data  on  the  delay  can  be 
provided  to  the  M Receiver  immediately  orior  tv  launch,  eliminating  the  requirement  for  the  receiver  to 
make  this  computation.  Initialization  of  ionospheric  propogation  delav  also  enables  the  missile  receiver 
to  function  while  tracking  only  one  Cl  PS  frequenc  y instead  of  two,  sinc  e the  second  frequency  exists  to  aid 
the  delav  computation  process. 

A constant  ionospheric  delay  correction  factor  is  adequate  tor  missile  flight  times  less  than 
'0  minutes.  For  longer  flights,  the  correction  factor  for  each  satellite  can  b r modeled  by  a polynomial 
expression  whose  coefficients  are  supplied  bv  the  launch  aircraft. 

Figure  shows  the  corresponding  hardware  simplications  that  van  be  made  in  implementing  an 
M- Receiver  bv  taking  advantage  of  the  aircra  ’ Ill'S  equipment  capability.  Another  significant  savings  in 
M-Rcceiver  hardware  shown  is  the  change  t a sequential  receiver  design  and  elimination  of  three  of 
the  four  carrier  tracking  channels.  This  simplication  is  not  a result  of  the  aircraft  interface,  but  rather 
'f  integration  of  the  CFS  receiver  with  a missile  inertial  guidance  svstem  (Ills'.  In  sequencing  through 
the  four  satellites,  any  given  satellite  is  only  tracked  for  one -fourth  of  the  time:  e.  g.  . K seconds  if  the 
total  period  is  20  seconds.  The  satellite  must,  therefore,  be  reacquired  each  sequencing  period.  Thus, 
the  missile's  inertial  navigation  capability  must  provide  dead  reckoning  of  position  and  velocity  suffi- 
ciently accurately  to  position  the  receiv  er  back  on  the  correct  code  chip,  avoiding  reacquisition.  This 
accuracy  is  strongly  dependent  on  the  initial  alignment  of  the  h IS.  and  subsequent  periodic  updating 
using  Ci PS  measurements. 

MISSII  K INFRTlAt  C.rtPANVF  SYSTKM  (lC.St  Al  tC.NMKNT 

In-flight  alignment  of  the  missile  s tC.S  v an  be  accomplished  in  one  of  two  wavs,  both  of  which 
relv  on  information  from  the  launch  aircraft.  Traditionally,  a missile  inertial  navigation  svstem  is 
aligned  by  a transfer  of  alignment  from  the  launch  aircraft  inertial  navigation  svstem.  This  typically  is 
accomplished  bv  periodic  transfer  of  aircraft  velocity  component  estimates  tv'  the  missile  via  the  data 
bus,  where  a Kalman  filter  compares  these  estimates,  which  it  assumes  tv'  bo  very  accurate,  tv'  its  own 
velocity  estimates  and  uses  the  differences  tv'  estimate  the  misalignment  quantities. 

However,  since  highly  precise  position  and  velocity  information  is  available,  alignment  of  the 
rc'.S  can  also  be  accomplished  directly  from  the  (TFS  receiver  measurements  in  the  missile,  providing  a 
significant  performance  advantage.  This  alignment  would  be  performed  in  the  identical  filter  that  pro- 
cesses OPS  pseudorange  and  pseudo-range  rate  measurements  during  ’light  to  provide  navigation  up- 
dates and  allows  estimation  of  both  the  dominant  inertial  component  errors  (e.  g.  . gvro  bias'  and  domi- 
nant OPS  errors  (e.  g.  , clock  phase  and  frequency!.  The  accuracies  of  these  two  alignment  approaches 
are  comparable. 
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M Receiver  Hardware  Simplifications 


An  I ppe r-  Diagonal  (F-D)  form  of  Kalman  filter  is  used  to  generate  the  integrated  GPS/ ine rtial 
navigation  solution.  This  filter  form  is  the  most  computationally  efficient  of  the  Kalman  filter  forms  that 
are  designed  to  ensure  a stable  estimation  solution.  The  M Receiver  range  measurements  are  used 
sequentially  by  the  filter,  one  every  b seconds,  to  estimate  the  dominant  inertial  and  GPS  errors.  The 
14  states  used  in  the  Hughes  Tactical  GPS  Guidance  System  filter  are  shown  in  Table  1.  This  filter 
provides  the  mechanism  for  aligning  the  inertial  sensor  package  to  the  navigation  coordinate  system  prior 
to  launch.  Alignment  is  achieved  via  an  'S'  turn  maneuver  in  the  horizontal  plane  to  produce  horizontal 
changes  in  velocity,  allowing  observation  of  the  azimuth  misalignment.  The  maneuver  and  correspond- 
ing velocity  history  are  shown  in  Figure  ' . The  transient  response  characteristic  of  the  filter  under 
these  conditions  can  be  seen  in  Figure  7.  Several  simulation  runs  were  made  with  different  interfering 
noise  histories.  The  shaded  area  indicates  the  resultant  dispersion  in  performance. 


TABLE  1.  DEFINITION  OF  FILTER  STATE  VARIABLES 


E'ilter  State 

System  State 

xi 

North  Velocity  Error,  m/sec 

X2 

West  Velocity  Error,  m/ sec 

x, 

Up  Velocity  Error,  m/sec 

X4 

Latitude  Error,  meters 

x. 

Longitude  Error,  meters 

xf 

Altitude  Error,  meters 

x7 

Misalignment  About  North,  degrees 

xs 

Misalignment  About  West,  degrees 

X9 

Misalignment  About  Up,  decrees 

XI0 

Clock  Phase  Error,  meters 

x 1 I 

Clock  Frequency  Error,  m/sec 

X • 

12 

Gyro  Drift  About  Forward,  deg /hr 

xn 

Gyro  Drift  About  1 eft,  deg/hr 

X | 4 

Gyro  Drift  About  7 , deg /hr 

N 


Figure  8.  Satellite  Local  Elevation  and  Azimuth 


The  principal  measure  of  guidance  system  performance  is  its  accuracy  in  determining  the  mis- 
sile's position  in  navigation  coordinates.  Studies  have  shown  that  achieving  adequate  navigation  accu- 
racy is  assured  by  simply  maintaining  track  of  the  satellite  signals.  If  the  receiver  is  able  to  track  the 
satellite  signals,  regardless  of  the  signal-to-noise  environment,  the  navigation  accuracy  is  acceptable 
for  midcourse  guidance;  therefore,  the  problem  is  essentially  one  of  maintaining  signal  tracking  in  a 
jamming  environment.  This  capability  is  closely  related  to  the  accuracy  of  velocity  aiding  provided  to 
the  receiver.  For  this  reason,  performance  is  measured  in  rss  velocity  error  and  is  presented  here 
relative  to  nominal  performance. 

Figure  9 illustrates  the  effect  on  performance  of  losing  the  overhead  satellite  for  a period  of 
60  seconds.  Surprisingly  small  errors  are  developed  under  this  condition.  This  is  primarily  a result 
of  the  ability  to  estimate  the  dominant  clock  errors  of  phase  and  frequency  offset.  This  performance 
shown  is  comparable  to  that  resulting  from  losing  any  one  of  the  four  satellites  for  an  equivalent  period. 

The  loss  of  two  satellites,  as  could  be  anticipated,  is  much  more  detrimental  to  performance. 
The  effect  of  losing  satellites  1 and  2 for  a bO-second  period  is  shown  in  Figure  10.  This  performance 
is  representative  of  that  experienced  with  the  loss  of  any  pair  of  the  four  satellites  being  tracked. 


Figure  9.  Effect  of  Losing  One  Satellite 
on  Velocity  Estimation  Error 


Figure  10.  Effect  of  Losing  Two  Satellites 
on  Velocity  Estimation  Error 


IV.  TAC  TH  AI  WEAPON  DELIVERY 


In  the  integrated  configu  ration  described  above-,  GPS  is  .in  especially  attractive  guidance  aid  for  f) 
tac  tical  weapons.  In  addition  to  great  accuracy,  this  radio  navigation  system  offers  three  attributes 
highly  desired  by  military  commanders:  flexibility  of  employment,  operational  simplicity,  and  stealth. 

N A V IG  A T IO  N A L A C C U R A C Y 

I'he  navigational  accuracies  of  most  GPS  receivers  are  expected  to  average  ^ to  10  meter  spheri- 
cal error  worldwide,  24  hours  a day.  Table  2 depicts  the  GPS  error  budget  which  leads  to  this  figure. 

For  sequential  tracking  receivers,  such  .is  the  \1-Keceivers  currently  being  developer!  within  the  I SA  I 
Tactical  GPS  Guidance  Demonstration  Program,  the  ranging  error  may  be  somewhat  larger.  In  addi- 
tion, for  long  flight  time,  GDOP  could  degrade  before  the  target  iN  reached  unless  the  receiver  is  de- 
signed and  programmed  to  change  satellites  during  flight  (or  a constellation  is  chosen  such  that  GDOP 
is  unconstrained  at  launch,  but  is  optimum  at  the  target).  Atmospheric  delay  error  may  also  grow, 
depending  on  missile  time  of  flight  and  type  of  propagation  delay  compensation. 

TABLE  2.  GPS  NAVIGATION  ERRORS 
(Meters,  In ) 


F r ror  Sou  rce 

GPS  Receiver 

Satellite  Ephemeris 

1.  5 

Uncorrected  Atmospheric  Delay 

• > u, 

Multipath 

1.  8 

Satellites  Unmodeled  Clock  Errors  and  Signal  Delays 

0.  Q 

Receiver  Ranging  Measurement  Deviation 

1.  8 

RSS 

8 

GDOP 

2.  2 to  < 

One  Sigma  Spherical  Error,  meters 

H to  11 

Geometric  Dilution  of  Precision  - a factor  which  describes  the  degradation  of  accuracy 

in  three  dimensions  due  to  the  nonoptimum  geometric  configuration  of  satellites. 

FLEXIBILITY  OF  EMPLOYMENT 

Weapons  using  GPS  guidance  will  provide  great  flexibility  of  employment  in  several  ways.  Since 
the  GPS  is  a radio  navigation  system,  these  weapons  will  be  capable  of  all-weather,  day-night  operation. 
'The  NAVSTAR  satellite  constellation  is  designed  to  provide  uniform  signal  coverage  over  the'  entire- 
earth.  GPS  guidance  will  tints  be  usable  worldwide.  Weapon  trajectories  will  be  unconstrained  by  terrain 
(mountainous,  flat,  or  ocean),  or  by  distance  from  friendly  forces.  Operational  flexibility  is  further 
enhanced  by  rapid  response  to  targeting.  Weapons  with  GPS  guidance  will  be  able  to  accept  targeting 
commands  before  launch,  via  program  tape;  in-flight  before  launch  via  pilot  or  weapon  system  operator 
inputs  over  the  aircraft  digital  bus;  or  even  postlaunch  via  secure  data  link,  such  as  the  Joint  'Tactical 
Information  Distribution  System  (.IT IDS). 


OPERATIONAL  SIMPLICITY 

Pnder  the  dynamic  scenario  of  conventional  combat,  operational  simplicity  is  a fcattirc  to  be 
desired  of  any  weapon  system.  Since  missiles  with  GPS  guidance  and  prelaunch  targeting  are  autono- 
mous (with  the  exception  of  the  satellite  down-link),  they  are  imminently  suited  for  standoff,  launch -and- 
leave  tactics.  'The  NAVSTAR  system  can  serve  an  unlimited  number  of  users  simultaneously,  eliminat- 
ing the  need  for  prestrike  coordination.  Finally,  the  built-in  ECM  resistance  of  a tactical  GPS 
guidance  system  aids  operational  simplicity  by  reducing  or  eliminating  requirements  for  supporting 
KGCM.  The  relative  magnitude  of  this  EGM  resistance  can  be  seen  by  examining  the  jamming  margin 
of  a GPS  guidance  system.  The  total  jamming  margin  results  from,  signal  gain  at  the  satellite  trans- 
mitter output,  gain  of  both  the  satellite  and  receiver  antennas,  and  the  processing  gain  of  the  receiver. 

Receiver  processing  gain  results  from  the  fact  that  the  GPS  employs  spread  spectrum  communi- 
cations. The  principle  of  operation  is  shown  in  Figure  11.  The  PUN  modulation  causes  a spreading  of 
the  baseband  signal  in  the  transmitted  frequency  domain.  The  receiver  then  compresses  this  wide  spec- 
trum signal  back  to  its  original  bandwidth,  by  correlating  the  received  signal  with  a replica  of  the  l’RN 
code.  At  the  same  time  this  correlation  acts  to  spread  any  interfering  source,  such  as  J,  by  the  same 
amount  that  the  spread  signal  was  compressed.  Narrowband  filtering  is  then  used  to  reject  that  inter- 
ference energy  lying  outside  the  compressed  bandwidth.  The  consequent  improvement  in  si  gnal  - to- noise 
ratio  results  in  receiver  processing  gain. 

'The  substantial  effectiveness  of  this  processing  gain  is  illustrated  by  calculating  the  transmitted 
power  that  would  be  required  of  a conventional  communication  link,  to  achieve  the  same  threshold  per- 
formance as  the  GPS  spread  spectrum  link  in  a given  jamming  environment.  Consider  a weapon  ap- 
proaching a target  anti  a 110  mile  nonspread  spectrum  communications  link  with  this  weapon.  The 
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postsignal  processing  signal -to-noise  ratio  required  by  this  receiver  is  identical  to  that  required  by  a 
GPS  receiver  for  equivalent  detection  and  tracking  performance.  For  either  receiver 


(KTPj  t J)  d 


for  J » KTR  f . 


d = transmitte  r-to- receive  r distance 


C = proportionality  constant 


P = transmitted  ERP 
KTRj  = receiver  thermal  noise 
J = jammer  power 

and  where  antenna  gains  are  neglected. 

Equating  postprocessing  signal-to-noise  ratio  for  the  two  receivers  and  solving  for  communica- 
tions link  transmitted  power  gives 


Vl-  = (S)  x (v.ps)  x P°ps 


where  the  subscripts  CL  and  GPS  denote  conventional  (nonspread  spectrum)  and  GPS  links,  respectively. 
The  design  goal  for  processing  gain  of  the  demonstration  GPS  Class  M- receiver  is  oO  dR,  while  the  pro 
cessing  gain  of  a conventional  receiver  is  0 dR.  Assuming  identical  C\V  jammer  power  impinging  on  both 


systems;  the  jamming  power  is  effectively  reduced  by  the  magnitude  of  receiver  processing  y-‘in, 
yielding: 
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Hence,  to  achieve  an  equivalent  degree  of  jamming  resistance,  a conventional  nonspread  spectrum  wea- 
pon communication  link  having  110  mile  range  would  require  100  times  greater  effective  radiated  power 
(ERP)  than  the  NAVSTAR  satellite  ERP! 


STEALTH 

The  final  attribute  of  GPS  guidance  is  stealth.  A weapon  equipped  with  GPS  guidance  is  entirely 
passive;  it  does  not  broadcast  its  presence  to  opposing  forces.  It  also  does  not  have  any  inherent  alti- 
tude limitations;  it  is  free  to  take  maximum  advantage  of  low  altitude  contour  tactics  and  terrain  mask- 
ing. The  implications  are  higher  survivability,  increased  effectiveness,  and,  lower  cost  per  strike. 


UTILITY  FOR  TACTICAL  WEAPONS 

How  do  these  operational  characteristics  impact  the  candidate  tactical  weapons''  Certainly,  a 
first  consideration  is  that  for  GPS  guidance,  accuracy  is  independent  of  range  to  target.  This  guidance 
attribute  is  more  important  for  longer  range  weapons  than  short.  Because  of  the  high  flexibility  of  em- 
ployment, GPS  guidance  is  ideally  suited  for  weapons  responsive  to  dynamic  scenarios.  Stealth  and  ECM 
considerations  favor  low  altitude  weapons.  Given  these  considerations,  weapons  that  could  make  maxi- 
mum use  of  GPS  capabilities  would  include  medium  range  and  over-the-horizon  antiship  missiles,  and 
air  or  sea-launched  cruise  missiles. 

An  antiship  missile  is  currently  limited  in  range  by  either  midcourse  guidance  accuracy  or 
target  position  uncertainty  at  the  end  of  flight.  The  total  mis  s ile  - to- ta  r ge  t position  uncertainty  at  the 
end  of  the  midcourse  phase  must  be  sufficiently  small  to  allow  acquisition  with  the  terminal  sensor.  The 
ability  to  predict  a target's  position  is  currently  several  times  better  than  the  midcourse  guidance  accu- 
racy of  antiship  missiles  using  inertial  navigation.  This  guidance  inaccuracy  necessitates  a pop-up  man- 
euver at  considerable  distance  from  the  target,  to  search  and  acquire  the  target  and  steer  out  errors. 
GPS  guidance  accuracy  would  allow  closing  to  much  shorter  ranges,  greatly  increasing  both  weapon 
effectiveness  and  survivability. 

GPS  guidance  would  be  nearly  as  beneficial  for  air-launched  conventional  standoff  weapons,  wide- 
area,  antiarmor  weapons  and  ground-launched  cruise  missiles;  but  for  these  weapons,  ECM  resistance 
appears  to  be  the  most  important  feature.  Subsonic  glide  and  boost-glide  weapons  would  also  make  use 
of  the  most  prominent  C.PS  characteristics,  but  guidance  system  cost  would  receive  a stronger  emphasis. 


V.  SUMMARY 

A high  level  of  functional  integration  between  the  delivery  aircraft  avionics  and  the  missile  has 
been  shown  tt>  be  particularly  important  to  the  design  of  a GPS  tactical  missile  guidance  system.  The 
system  design  described  achieves  ECM  resistance  and  positioning  accuracy  which  approaches  those  of  a 
GPS  aircraft  navigation  system,  but  with  simplified  missile  equipment  having  far  less  cost.  These  re- 
sults have  been  achieved  by  eliminating  the  performance,  in  the  missile  equipment,  of  functions  which 
are  performed  by  aircraft  equipment  and  can  be  supplied  prior  to  launch. 

A key  element  of  the  system  implementation  is  a UD  filter  which  mixes  the  GPS  measurements  of 
ranges  to  the  satellites  with  inertial  measurements  of  vehicle  motion,  producing  estimates  of  the  domi- 
nant GPS  and  inertial  errors  and  reduction  of  their  effects.  The  ability  to  estimate  receiver  clock  errors 
is  shown  to  greatly  reduce  the  sensitivity  to  loss  of  one  of  the  four  satellites.  The  effect  of  losing  two 
satellites  for  a period  of  60  seconds  is  much  more  severe,  causing  a doubling  of  the  errors  in  velocity- 
estimation  for  receiver  aiding,  which  is  critical  to  maintaining  signal  tracking  in  an  ECM  environment. 

The  advantages  in  the  use  of  GPS  for  midcourse  guidance  of  tactical  long  range  air-to-surface 
missiles  in  combination  with  a GPS-equipped  launch  aircraft  are  clear.  These  advantages  provide  a 
weapon  delivery  capability  unmatched  in  both  performance  and  operational  flexibility.  With  inherent  high 
position  accuracy,  GPS  guided  missiles  can  be  delivered  worldwide,  in  any  weather,  over  anv  terrain. 
Using  GPS,  missiles  can  fly  at  extremely  low  altitudes  with  a completely  passive  guidance  system,  yield- 
ing a maximum  of  stealth  and  consequent  dividends  in  both  weapon  effectiveness  and  survivability.  The 
antiship  role  provides  a graphic  illustration  of  the  stealth  advantages,  coupled  with  the  potential  for  opera- 
tion at  ranges  limited  only  by  targeting  uncertainties. 
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Digital  flight  control  systems  must  be  designed  to  match  their  specific  functional  requirements 
if  they  are  to  satisfy  the  integrity,  performance  and  cost  targets.  The  architecture  must  be  simple  and 
modular  so  that  it  can  be  readily  analysed.  There  must  be  a one  to  one  correspondence  between 
software  and  hardware  to  ensure  visibility,  particularly  for  the  failure  Mode  I- lfect  analysis. 

Modularity  enables  flexibility  to  be  maintained  during  development  and  permits  development  costs  to  be 
shared  between  projects.  A modular  system  is  described  and  its  associated  communication  and  control 
system, which  uses  a standardised  interface,  is  outlined.  The  advent  of  the  digital  microprocessor  has 
extended  the  range  of  viable  architectures  and  has  made  multiprocessor  configurations  (particularly  dual 
processor)  attractive.  In  such  configurations,  1G  bit  microprocessors  perform  auxiliary  functions  such 
as  data  management  and/or  self  test.  The  degree  of  self  test  can  extend  from  preflight  testing  to  full 
monitoring,  in  which  the  microprocessor  undertakes  a dissimilar  check  of  the  main  processor,  thereby 
protecting  against  common  mode  failures  which  can  occur  in  a multiple,  similar  redundant  system. 


INTRODUCTION 


A modern  automatic  flight  control  system  can  vary  in  sophistication  from  a simple,  single 
function  device  (eg  a roll  or  yaw  damper)  to  a multi-functional  system  embracing  3/4  axis  autostabil- 
isation, autopilot  functions,  thrust  management,  flight  envelope  protection,  and  flight  management 
(navigation  and  performance  computation).  The  development  of  sophisticated  automatic  flight  control 
systems  has  been  accelerated  by  the  advent  of:- 


Control  Configured  Vehicle  design  in  which  the  inherent  aerodynamic  stability  of  combat 
aircraft  is  reduced  to  improve  manoeuverability  and  structural  efficiency  . 


Active  control  of  commercial  aircraft  which  embraces  manoeuvre  load  control  (the 
redistribution  of  aerodynamic  loads  to  reduce  structural  loads),  elastic  mode  suppression 
and  gust  alleviation. 


c)  Three  axis,  full  authority  fly-by-wire  primary  control  systems 


Operational  survival  of  a single  failure  can  !>•  ensured  by  the  use  of  either  a triplex  or  a 
■-)  a duplicate  monitored  arrangement,  and  higher  integrity , double  failure  operational  systems  can  be 
/ " t"  achieved  by  means  of  either  a quadruplex  or  a triplicate  monitored  system.  'Hie  Hoeing  NO-  14,  for 
example,  employs  triplex  redundancy  for  fail  operational  systems,  and  reduced  levels  of  redundancy 
for  less  critical  functions.  A current  full  authority  fly -by- wire  application  employs  double  triplex 
actuators  for  the  primary  control  surfaces,  four  lanes  being  driven  bv  unconsolidated  quadruplex 
channel  outputs  and  the  remaining  two  lanes  by  the  consolidated  outputs  from  the  quadruplex  channels. 

\ s the  level  of  sophistication  of  these  systems  grows,  it  is  increasingly  necessary  to  adopt  a 
’total  system’  approach,  whereby  design  is  optimised  to  strike  the  best  compromise  between  various 
conflicting  design  factors  such  as  integrity,  performance,  crew  workload,  availability  , and  life  cycle 
costs.  Moreover,  the  individual  factors  are  themselves  giving  rise  to  more  stringent  design  criteria. 

'bhe  probability  of  failure  of  a high  authority,  fail- ope  rational  system  must  be  extremely  low,  and 
this  calls  for  a high  integrity  design  incorpora  tine,  both  redundancy  and  self  monitoring  techniques  to 
obviate  the  catastrophic  effects  of  control  surface  hardovers  under  single  or  multiple  failure  conditions. 
Digital  processors  do  not  degrade  gracefully  and  the  consequences  of  a hardware  failure  or  software 
error  may  be  complicated  and  variable,  dependent  on  the  nature  of  the  computation  being  performed. 

Such  failures  can  result  in  an  abrupt  and  extensive  system  malfunction  unless  suitable  failure  detection 
and  correction  techniques  are  incorporated.  Special  safety  assessment  procedures  have  been  developed 
which  take  account  of  the  failure  characteristics  peculiar  to  digital  systems.  High  integrity  hardware 
and  software  architectures  are  designed  to  provide  visibility  of  operation  while  meeting  performance 
and  cost  specifications. 

This  paper  describes  how  the  advances  in  technology  are  leading  to  systems  which,  through  the 
use  of  standardised  interfaces  and  modular  design,  an-  flexible  and  provide  adequate  computing  power 
and  integrity  whilst  meeting  life  cycle  cost  targets. 

2.  MINIMISATION  OF  I IFF  C\(  1.1  COSTS 

Procurement  agencies  are  cost  conscious,  and  minimisation  of  life  cycle  costs,  involving  an 
optimum  trade  off  between  acquisition  and  operating  costs,  is  a key  design  factor.  The  ability  to  adopt  a 
low  risk,  ’task  orientation’  approach  whereby  multisource  MSI  and  LSI  devices  are  suitably  configured 
to  meet  a particular  customer  specification  with  the  minimum  of  special- to -type  hardware,  while  taking 
advantage  of  continuing  hardware  development  programmes  is  a key  factor  in  reducing  life  cycle  costs. 
Phis  approach  permits  the  use  of  standardised  modules  and  test  procedures  for  most  major  functional 
elements  without  detriment  to  the  design  flexibility,  thus  enabling  development  overheads  to  he 
minimised  for  each  application. 

Operating  costs  are  minimised  by  devoting  effort  during  the  design  phase  to  improving  reliability 
and  ease  of  maintenance.  Software  reliability  is  achieved  by  adherence  to  a hierarchically  structured 
pro  -.ramming  technique  to  ensure  design  visibility  , together  with  the  use  of  a disciplined  modular 
structure  with  minimum  inter-modular  communication  and  interaction.  Software  hardware  integration 
testing  requires  the  use  of  independently  verified  hardware,  and  includes  closed  loop  testing  with 
simulated  aerodynamics  for  all  operating  modes  throughout  the  flight  envelope. 

A variety  of  measures  are  adopted  to  ensure  hardware  reliability  . Component  quality  is  carefully 
specified  to  optimise  procurement  cost  and  reliability,  environmental  burn-in  tests  are  undertaken  to 
eliminate  infant  mortality  defects,  and  derating  criteria  are  applied  to  prolong  component  lift*.  The 
reliability  of  semiconductor  devices  and  high  density  LSI  packages  is  also  critically  dependent  upon 
adequate  cooling,  and  conducting  cooling  together  with  cold  wall  heat  exchanger  techniques  are  used  to 
eliminate  potential  hot  spots  and  to  reduce  reliance  upon  the  availability  of  cooling  air. 

equipment  is  specifically  designed  for  maintainability  with  regard  to  modularity  , accuracy  of  fault 
location,  and  rapidity  of  testing  and  fault  diagnosis  using  ATT.  In  particular,  computer  data  highways 
interface  directly  with  A IT,  and  data  associated  with  in-flight  defects  can  be  stored  on  non-volatile 
memory  for  post- flight  examination  at  the  various  levels  of  servicing.  The  high  diagnostic  confidence 
factor,  and  hence  a low  wrongful  removal  rate, together  with  the  high  speed  and  simplicity  in  the  use  of 
HITT,  minimises  labour  costs  at  first  line.  Second  and  third  line  cost  are  similarly  reduced  and  thus 
is  aided  further  by  development  of  low  cost  ATI'  which  matches  the  specific  application.  Moreover,  the 
effectiveness  of  BITL  and  ATI'  yields  a significant  economy  in  spares  inventory  investment. 

As  digital  systems  employ  a large  percentage  of  tin  e shared  hardware  which  performs  a variety  of 
system  tasks,  special  test  software  is  required  to  exercise  all  the  hardware  functions  in  a manner  more 
rigorous  and  yet  independent  of  any  given  flight  software  program.  This  test  software  is  used  during 
environmental  testing  to  ensure  thorough  exercising  of  the  equipment  over  the  full  range  of  environmental 
conditions  and  forms  the  basis  of  the  post  maintenance  safety  tests. 

:L  TRFNDS  IN  DIGITAL  TFCI1NOLOC.Y 

In  recent  years  LSI  microprocessor  technology  has  rapidly  progressed  to  a level  which  matches 
the  avionic  requirements.  Current  mic reprogrammable  computers  enable  the  designer  to  select  the 
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rhv  use  of  bus  architectures,  coupled  with  adoption  of  common  data  exchange  standards 
let!  Mil  .-STD- for  military  applications  and  AKIV  42‘J  for  civil  applications),  facilitates 
expansion  by  the  addition  of  input  or  output  devices  to  the  I/O  bus.  Maintainability  is  considerably 
enhanced  at  I.KT  and  module  level  as  A ll  is  easily  interfaced  with  the  internal  MU'  buses.  Transfer 
of  data  within  typical  flight  control  computers  is  facilitated  by  the  Direct  Memory  Access  (DMA) 
technique  in  which  an  1 ( ) Controller  ’handshake'  mechanism  determines  priority  and  duration  of  I O 
access.  The  use  of  ’cycle  stealing'  techniques  allows  processing  to  continue  uninterrupted  during  data 
trails  fe  r. 

1IICII  INTFC.KITS  SYSTF  MS  AIU’IIITI'CTIJKI  S 

High  integrity  system  architectures  enable  bounds  to  be  placed  on  the  effects  of  individual  system 
malfunctions  commensurate  with  the  degree  of  hazard  involved.  Multiplexed  systems  employing  only 
cross  channel  comparison  for  safety  monitoring  are  potentially  susceptible  to  common  mode  failures, 
common  design  errors  and  dormant  failures,  and  close  attention  to  the  design,  analy  sis,  and  testing  is 
therefore  essential  to  preclude  such  conditions.  Common  n ode  failures  may  be  induced  by  the  external 
environment  and  bv  cross  channel  or  cross- Lane  fault  propagation.  The  incidence  of  common  design 
errors  is  minimised  by  design  visibility,  coupled  with  adherence  to  strict  software  development 
procedures  together  with  rigorous  testing.  The  use  of  dissimilar  monitoring  in  each  computing  channel 
can  also  provide  fail  safe  protection  against  such  errors,  and  can  be  used  to  detect  dormant  failures. 

\ isibility  of  hardware  design  is  achieved  by  a combination  of  modularity,  the  minimisation  of 
complexity  consistent  with  efficient  task  mechanisation,  and  the  minimisation  o:  undefined  and 
asynchronous  operations  such  as  interrupts.  The  use  of  a separate  microprocessor  for  DMA  I 'o  Control, 
operating  in  parallel  with  the  main  processor,  results  in  a clear  hardware  and  timing  interface  between 
the  real  world  and  the  software.  The  main  processor  is  specifically  designed  for  the  flight  control  task, 
and  a compromise  can  he  achieved  between  program  size  and  processor  complexity  which  minimizes 
design  errors  in  either  software  or  hardware.  Aided  by  the  hardware  design,  software  can  he  readily 
structured  into  small  independent  modules,  whose  addressing  and  control  sequence  can  be  made 
independent  of  time  and  instantaneous  parameter  values  thereby  facilitating  the  analysis  and  testing  of 
inte rmodule  communications. 


1 

PROP  PQQD  R 

ADDRESS 

PROGRAM 

r nuucooun 

W 

STORE 

ADDRESS  DATA  I INSTRUCTION 

Lr^n 

•— H DATA 
r -d  STORE 

; : — ? — 

AD  Dr  ESS  DATA 

f 

1/0 

CONTROLLER  4 2 


X CHAN 
RXS 


ANALOGUE 

INPUT 

BUFFERS 


X CHAN 
TX 


DISCRETE 

OUTPUTS 


Figure  5 


Dual  Processor  - I/O  Control 


The  use  of  a separate  micro  processor  for  the  DMA  control  of  I/O  operations  reduces  the  task  of 
the  main  processor,  and  provides  considerable  scope  for  increasing  the  extent  of  self  monitoring 
throughout  the  svstem.  Hitherto,  self  monitoring  of  a single  processor  has  been  used  mainly  to 
augment  the  cross  comparison  monitoring  of  redundant  systems  to  guard  against  dormant  and  common 
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mouitorin,:  is  also  executed  by  a separate  processor,  protection  is  provided 


1 or  certain  critical  elements  of  dir.ital  «v  stems.  dedicated  liardware  monitors  are  used  to 
complement  the  self  test  software  routines.  1 he  most  likely  configurations  lor  near  term  future 
S,  stems  will  employ  an  optimum  mix  of  self  monitoring  cross  comparison  n.omtortnr  and  dissimilar 
monitoring,  as  governed  by  the  particular  system  requirements. 

U.  Mi  l . rtl’KixTSSOK  I'OXi'KlPHATIONS 

Future  flight  control  sv stems  will  employ  more  elaborate  multiprocessor  configurations  in  whirl, 
the  partitioning  of  functions  among  distributed  processors  can  provide  a meusur,  o!  rracciul  denudation 
for  the  overall  svstem.  as  well  as  relaxing  size,  performance  and  power  consumption  constraints  whn 
apply  to  present  processor  designs.  Possible  configurations  range  from: 

at  Several  processors  interconnected  by  a data  bus  accessing  common  data  and  program 
stores  and  the  interfaces. 

to  hi  Several  processors,  each  with  its  own  program  store,  local  data  store  and  I O interlaces 
communicating  via  either  a common  data  bus  or  a common  data  store. 

Task  allocation  in  such  configurations  can  also  take  a variety  of  forms,  for  example,  each 
processor  can  either  perforn  a particular  system  function  tl«  reby  restoring  the  axis  ->'  a,  -bo  • 
characteristic  of  analog  sv stems  with  the  minimum  hardware  impact.  Mternatively  . eac  ti  P>y‘  e sa, 
can  undertake  a multijob  task  on  a next- available  priority  basis,  which  enables  tasks  to  be  red sir  In  U d 
amongst  processors  under  failure  conditions  ami  permits  the  use  ol  hot  spares  to  improi,  . ha 
Distributed  task  configurations  can  also  be  used  with  microprocessors  l'erlornnug  or  controlli.n 
interface  functions. 


CONCLUSIONS 

It  is  now  possible  to  develop  flight  control  systems  which  have  the  flexibility  to  met  a range  01  . 

requirements.  This  flexihilitv  is  based  on  bus  orientated  design  and  modular  input- on  put  and  pi  of  > i 

structures.  For  most  applications  the  required  levels  of  integrity  can  be  achieved  by  the  use  o,  , , oss 
channel  and  self  monitoring.  For  the  highest  levels  of  integrity  . such  as  lull  tin  e fly -by-w  . th 
problem  of  common  failure  can  be  overcome  by  designing  for  visibility  and  by  introduce  el,  u , nt.  . 
dissimilarity  where  visibility  cannot  reach  the  level  required. 

In  sv stems  where  full  tin*  operation  is  required  and  where  environmental  factors  will  lead  to 
derangement  of  more  than  one  channel  then  some  form  of  hardened  standby  taciUty  must  be  piovulid 
which  survives  the  derangement.  Where  the  environmental  factors  cause  only  temporary  distu.  I am 
the  system  can  he  designed  to  recover  from  the  transient  by  detecting  the  transient  and  entering  a 
realignment  mode. 


DEVELOPMENT  OF  THE  INTEGRATED  FLIGHT  TRAJECTORY  CONTROL  CONCEPT 


M.  W.  Bird,  PhD* 
W.  L.  Young** 

L.  Addis* 

G.  L.  Comegys* 


* Lear  Siegler,  Incorporated 

* Instrument  Division 

£141  Eastern  Avenue,  S.  E. 
Grand  Rapids,  Michigan  49508 


**  Flight  Control  Division 

Air  Force  Flight  Dynamics  Laboratory 
Wright  Patterson  AFB,  Ohio  USA  45433 


Operational  missions  into  heavily  defended 
likelihood  for  deviations  from  the  intended  rout 
Command  and  Control  centers  will  impose  heavy  wo 
pi  lot/aircrew.  This  paper  describes  the  approac 
grated  Flight  Trajectory  Control  (IFTC)  program: 
of  flight  control  systems  and  navigation  compute 
for  four  dimensional  trajectory  generation  and  d 
procedures  for  operating  on  information  received 
system  is  complementary  to  the  pilot  and,  by  its 
duces  the  potential  for  pilot  error  in  high  stre 
also  describes  the  operational  advantages  offere 
method  of  evaluating  its  performance. 


target  zones  with  the 
es  and  redirections  from 
rkload  demands  upon  the 
h selected  by  the  Inte- 
1)  combine  the  functions 
rs , 2)  develop  techniques 

isplay,  and  3)  develop 
via  data  link.  The 
logical  operation,  re- 
ss  situations.  The  paper 
d bv  the  system  and  the 


1.  INTRODUCTION 

The  proliferation  of  the  enemy  military  forces  in  numbers  and  in  sophistication  has 
been  impressive  in  the  past  decade.  This  growth  and  the  ability  to  apply  that  military 
force  quickly  and  anywhere  in  the  world,  stresses  the  importance  of  a demonstrated  deter- 
rent capability  which  can  react  immediately  and  apply  the  appropriate  force  in  any  con- 
tingency. Strategic  power,  tactical  power,  global  mobility  and  a precise,  well-ordered 
strike  capability  will  be  necessary  parts  of  that  required  capability. 

The  next  confrontation  will,  in  all  likelihood,  be  intense  tactically  and  non-nuclear. 

The  battle  area  will  be  heavily  defended  by  a multitude  of  defensive  weapons  (SAMs,  AAA, 
etc)  supported  by  enemy  fighter  aircraft.  The  airpower  of  the  enemy  will  be  formidable. 
Enemy  fighters  will  be  encountered  in  numbers  far  greater  than  in  past  conflicts.  In 
fact,  the  number  of  enemy  fighters  will  probably  exceed  the  number  of  friendly  aircraft. 

Not  only  will  the  friendly  pilot  have  to  be  concerned  about  the  unfriendly  aircraft  as  a 
threat,  but  the  ground  defenses,  as  well,  will  be  numerous  and  quite  lethal.  An  accurate, 
up-to-date  knowledge  of  enemy  air  and  ground  defenses  and  the  capability  to  maneuver 
through  those  defenses  in  a path  of  minimum  exposure  will  certainly  increase  the  surviv- 
ability, and  hence  effectiveness,  of  our  friendly  aircraft. 

Communication  and  precise  time-space  coordination  have  been  highlighted  as  key  capabilities 
required  to  successfully  handle  this  conflict.  The  ability  to  put  forth  a well-ordered 
strike  force  with  capabilities  to  strike  at  night  and  in  adverse  weather  and  to  redirect 
to  targets  of  higher  priority,  help  to  offset  the  difference  in  numbers  of  aircraft  that 
the  enemy  will  possess.  However,  as  the  pilot  is  given  increasingly  greater  capabilities 
(more  sophisticated  weapons,  aircraft  and  control  freedom)  and  is  required  to  meet  more 
precise  times  on  target  after  being  redirected,  the  cockpit  workload  may  become  prohibi- 
tively high.  Reduction  of  pilot  workload,  through  levels  of  automation  and  simplification 
of  controls  and  tasks  in  the  cockpit,  appears  necessary  to  maintain  a manageable  level  of 
effort  for  the  pilot. 

The  Integrated  Flight  Trajectory  Control  (IFTC)  program  is  concerned  with  these  problems 
that  the  pilot  will  face  in  the  future.  To  better  appreciate  the  expected  problems,  the 
projected  tactical  environment  and  operational  techniques  need  to  be  examined  in  more 
detail. 

As  indicated  above,  the  tactical  scenario  is  characterized  by  large  numbers  of  enemy  air 
and  ground  elements, & heavy  concentrations  of  air-to-air  and  ground-to-air  defense  systems 
on  both  sides  of  the  battle  zone.  The  enemy's  superior  numbers  of  land  and  air  elements 
requires  the  friendly  air  forces  to  maintain  tactical  air  superiority  through  more  effi- 
cient utilization  of  aircraft.  Friendly  aircraft  will  be  required  to  fly  missions  into 
enemy  territory  under  night  and  adverse  weather  conditions  to  neutralize  and/or  hamper 
enemy  ground  movements . To  accomplish  this,  a high  level  of  command  and  control  (C-)  will 
be  utilized  for  efficient  allocation  of  available  air  and  ground  elements.  A jam  resis- 
tant, digital  communication  link  will  supply,  in  real  time,  command  and  control  directives 
and  tactical  information  from  various  sources  to  the  cockpit  for  the  pilot  to  assimilate 
and  act  upon. 


This  secure  data  link  capability  is  currently  being  developed  by  the  L'.S.  Department  of 
Defense  under  the  name,  Joint  Tactical  Information  Distribution  System  (JTIDS)[1).  Ex- 
amples of  the  tactical  information  sources  for  JTIDS  are:  near  real-time  reconnaissance 
from  Quick  Strike  Reconnaissance  (QSR)  aircraft,  ground  and  air  threat  locations  from  the 
Precision  Emitter  Locator  Strike  System  (PELSS),  and  aircraft  track  information  (friendly 
and  unfriendly)  from  the  Airborne  Warning  and  Control  System  (AWACS)  and  from  other  JTIDS 
user  aircraft.  Coupled  with  the  tactical  information,  a precision  navigation  system  such 
as  the  Global  Positioning  System  (GPS) [2]  or  the  JTIDS's  Relative  Navigation  Capability  |3) 
will  be  used  for  the  tactical  navigation  grid  to  supply  the  accuracy  needed  for  night/ 
adverse  weather  operation. 

Air  operations  in  this  dense  air  and  ground  threat  environment  will  be  characterized  bv 
complex,  time  critical  mission  profiles  needed  to  coordinate  the  mix  of  strike,  airlift 
and  support  aircraft.  This  precise  time-space  coordination  will  enhance, 

• air  issault  missions  where  timely  support  from  air  defense,  stand-off  jammers, 
and  gunships  is  critical  for  mission  success  and  survivability, 

• interdiction  missions  which  require  time  scheduling  uppres  ioi  • enemy 

defenses  while  the  strike  aircraft  proceeds  with  the  weapon  deliverv  in  con- 
cert with  other  strike  aircraft, 

• airlift  missions  where  air  defenses  and  ground  defense  support  in  air  drop 
areas  is  required  for  the  rime  intervals  when  the  transport  aircraft  are  highly 
vulnerable  to  enemy  attack,  and 

• night /adverse  weather  missions  flown  under  instrument  conditions  which  signifi- 
cantly contribute  to  the  cockpit  workload. 

The  real  time  redirection  capability  and  the  increased  availability  of  tactical  data  pro- 
vided by  the  JTIDS  will  obviously  enhance  the  capability  of  the  friendly  forces.  However, 
this  capability  for  redirection,  though  beneficial,  will  increase  the  already  high  cockpit 
workload  if  not  implemented  properly.  Targets  will  change,  refueling  will  be  rescheduled, 
ingress /ogress  routes  will  vary  and  all  this  can  and  will  occur  after  takeoff,  thus  af- 
fecting the  mission  profiles  and  schedules  of  a number  of  air  elements. 

Restating,  the  [FTC  program's  concern  is  that  in  the  dense  threat  environment,  coupled  with 
the  vast  availability  of  information  and  a redirect  posture,  the  potential  for  increased 
pilot  workload  will  in  all  likelihood  make  the  pilot  the  limiting  factor  in  the  execution 
of  time  critical  missions.  Thus,  the  operational  improvements  that  can  be  provided  by  C- 
nnd  the  advanced  tactical  systems  may  not  be  reliably  achieved  due  to  the  inability  of  the 
pilot  to  translate  the  tactical  situation  information  supplied  to  the  cockpit  into  appro- 
priate aircraft  control  actions. 

Current  state-of-the-art  cockpit  equipment  (autopilots,  flight  directors,  and  Inertial 
Navigation  Systems  (INS))  provide  pilot  relief  and  steering  cues  for  flying  under  constant 
attitude,  heading,  altitude,  or  speed  conditions  and  for  flying  straight  line  profiles 
between  stored  mission  destination  points.  Today,  this  equipment,  along  with  navigation 
maps  and  hand  calculations,  are  used  to  navigate  along  the  mission  route  and  meet  all 
specified  target  and  rendezvous  times.  Determinations  of  fuel  quantities  to  be  used  during 
the  mission  segments  and  refuel  points  are  computed  during  the  pre-mission  planning.  De- 
viations from  che  original  mission  plan,  which  could  be  caused  by  the  need  to  avoid  the 
lethal  airspace  around  a new  enemy  SAM  location,  the  need  to  divert  from  the  current  course 
because  of  an  approaching  enemy  aircraft,  or  profile  changes  made  to  take  advantage  of 
terrain  features  to  minimize  detection  by  enemy  radars,  will  require  the  pilot  to  work 
with  navigation  maps  and  the  new  tactical  data  to  determine  the  desired  path  back  to  the 
original  mission  profile.  These  disruptions  will  force  the  revisions  of  the  profile,  the 
time  schedule,  and  the  fuel  predictions. 

Mission  redirects,  especially  redirects  that  require  precise  space-time  coordination  with 
other  air  elements,  will  require  even  more  work  by  the  pilot.  The  new  mission  route  will 
need  to  be  plotted  on  the  navigation  maps  based  on  JTIDS  alphanumeric  messages,  and  using 
aircraft  performance  charts'  It  must  be  determined  if  the  time  schedule  can  be  met  and  if 
there  is  sufficient  fuel  to  execute  the  task  and  return  to  base  or  rendezvous  with  an 
available  refuel  tanker.  Survivability  must  also  be  considered.  In  revisin'-  the 
mission  profile,  the  threat  situation  needs  to  be  considered.  If  the  mission  is  achiev- 
able and  warrants  the  risk,  data  describing  the  mission  route  will  be  entered  into  the 
cockpit  equipment  used  for  flying  the  aircraft  along  the  new  profile.  If  the  pilot  noti- 
fies the  commander  that  he  cannot  comply  with  the  mission  redirect,  the  process  will  start 
over  and  a target  that  could  be  destroyed  may  be  lost. 

The  level  of  this  type  of  cockpit  work  is  formidable  for  a pilot  or  aircrew  under  non- 
combat situations  and  is  probably  impossible  to  manage  with  the  heavy  stress  expected  in 
combat  situations.  Furthermore,  detailed  planning  for  mission  changes  and  redirects, 
which  have  not  been  needed  for  effective  operations  in  past  military  air  conflicts,  reduces 
the  valuable  time  needed  for  operation  of  radar,  communication  receivers,  and  jamming 
equipment,  and  for  early  visual  detection  of  encmv  aircraft  - a fundamental  concern  of  all 
military  pilots. 

The  [FTC  program  objective  is  to  expand  the  flight  management  capabilities  of  on-board 
equipment  to  reduce  the  pilot  workload  needed  to  operate  in  a hostile  tactical  environ- 
ment with  both  real  time  mission  redirects  provided  by  data  links  or  pilot  inputs  under 


autonomous  operation  This  prop,  ram  is  do  vo  lop  l up,  a system  whieh  adds  ! 1 l v.lit  m.ni.if,cment 
eapahilit  ies  throuchthe  use  ol  div.ital  computers  t o Integrate  p.uidaneo  am!  control  with 
com  n'l  display,  navigation  and  data  link  systems. 

HU*:  INTKCKATKD  Kl.lUHT  TRA.I1\(  TORY  CONTROL  CONCKPT 

T'  c Intoc.ratod  Fltp.hl  Tralectorv  t’ont  rol  program  is  developing,  an  on  hoaid  system 
that  will  provide  pilots  increased  capability  for  real  t ime  management  ol  t he  i t tact  i ca  1 
missions  Tlu*  expanded  tlip.ht  management  eapahilit  ies  will  In*  achieved  t hroup.h  the  tol 
l ow  i np. 

• Real  t ime  comput  at  ion  ot  font  dimensional  (x.v.z  ami  t ime)  t i ajectories  in 
response  t o pilot  or  data  link  inputs  On  hoard  comput at  ion  ot  the  mission 
profile  relieves  the  ui  lot  ot  this  time  consuminv.  ami  mentally  latip.uinp.  task 

• Automatic  v.ui  dance  and  control  ot  the  aircraft  alone,  the  font  -dimensional 

(•*  0)  trajectory  to  provide  the  capability  of  achieving,  assigned  mission  t ime 
ot  arrivals  with  minimum  pilot  ettoit  while  t’lvinv.  missions  duriuc.  nip.ht  adverse 
went  hei  eotnlit  ions  Precise  aircraft  coni  rol  in  both  space  anil  t ime  is  achieved 
usinp.  accurate  radio  and  inert  ial  naviv.at  ion  systems  This  aircraft  control 
cap ah i 1 i t v complements  the  all  went  bet  I arret  detection,  weapon  delivery  and 
landing  systems  that  exist  oj  will  exist  on  tact  ical  a i rcr.il  t 

• Integral  ion  ot  the  control  display  system  with  the  * D trajectory  general  oi  and 
p.uidaneo  and  control  funct  Ions  to  ettect  an  efficient  technique  tot  pilot  intei 
action  with  the  l FTC  system.  Craphical  i eju  e.-  ent  a t i on  ot  eithei  a horizontal 
oi  vertical  view  ot  the  tactical  situation,  iucl  inline.  the  comput  ed  t t a ject  i»r  i es  . 
will  he  displayed  on  an  electronic  display  For  pilot  common lent  ion  with  the 
system,  an  interact  ive  cont  ro  l / il  l sp  1 av  consist  inv.  ot  ,i  mult  itunct  ion  keyboard. 
deilicati*d  r.K'de  keys,  and  an  electronic  display  lor  present  at  ion  ot  alphanumeric 
data  has  been  developed  which  minimizes  the  effort  the  pilot  needs  to  use  to 
create,  modify,  and/or  enpap.o  new  mission  profiles 

The  l FTC  system  will  add  tliv.ht  manav.ement  eapahilit  ies  t i>  both  military  transport  and 
fip.htors  with  t ho  trajectory  generation,  .v.ui  dance  and  control,  data  link  integration, 
and  interactive  cont  rol  lot  display  techniques  applicable  l o both  assault  anil  aiilitt 
mi  ss i ons 

.V  l System  Pescript  ion 

Figure  1 i 1 l ust  tat  es  the  1 FTC  i nr  ev.t af  i oti  ol  trajectory  f.i'iirt  .it  ion.  aim. iff  control, 
tact  ical  communical  i on  systems,  navi  pat  ion  systems,  and  cont  rol  'display.  Pic.  ital  pro 
cessinp,  is  the*  means  through  whidi  this  int  ev.t  at  ion  is  achieved  The  trajectory  v.eneiatoi 
the  control  law.  and  interact  ive  cont  ro  1 /di  sp  l ays  processing  make  up  the  heart  ot  the 
comput  or  program.  Tlu*  computer  processes,  1 ) aircraft  posit  ion.  velocity^  and  at  t i t ude 
inputs  from  the  ai  ret  aft  ’s  naviv.at  ion  system.  ) tact  ical  situat  ion  and  C-  data  t rom  the 
commun  i cat  i on  system,  and  l)  pilot  inputs  inserted  t hroup.h  tlu*  interact  ive  control  display 
hardware  The  computet  out  put  s aircraft  control  commands  to  tlu*  fliqht  cont  rol  system 
and  data  to  the  cockpit’s  displays  and  indicators. 

The  trajectory  peucr.it  oi  comput  es  the  • P t la  ject  erv  based  on  data  detinin.**.  the*  mission 
profile,  data  dosciihinp  tin*  tlu  eat  environment  s.  and  knowledge  ot  the*  aircratt  capabil 
it  ies  and  constraints  T he  mission  profile  data  is  a sequence  ot  points  (waypoints,  tar 
v.ets,  rendezvous  points,  mission  task  initial  points,  and  approach  points)  on  flu*  tliv.ht 
path  with  additional  point  parameters  such  as  Time  of  Arrivals  (TOA)  and  speed,  detininp 
points  on  the  speed  and  time  schedule  The  trajectory  pone  rat  or  comput  es  a set  ot  paiam 
eters  that  define  all  points  on  the  horizontal  and  vert  ical  parts  ot  flu*  trajectory,  the 
speed  and  t ime  schedule  profiles,  and  the  fuel  requirements  tor  the  mission  The  trajec- 
tory is  adjusted  to  either  avoid  the  lethal  airspace  around  throats,  oi  it  necessary, 
penetrate  them  with  a minimum  ot  aircraft  exposure  Tin*  aiiaiatt  per  I ormaiice  capabilities 
the  operat  ional  limit  at  ions,  and  predicted  winds  are  constraints  on  the  comput  od  tra  joe 
t orv 

(aiidanee  and  cont  rol  o t the  aircraft  is  handled  by  a cont  rol  law  that  t * acks  the  computet 
peno  rated  profile  according,  t o the  comput  od  time  schedule  The  control  law  has  both  auto 
mat  ic  and  manual  modes.  In  the  automat  io  mode,  which  relieves  tlu*  pilot  ot  the  tracking, 

task,  the  cont  ro l law  generates  elevator,  aileron,  and  throttle  commands  t o minimize  the 

difference  between  die  current  aircraft  state  (posit  ion.  velocity  and  at  t it  ude)  and  tlu* 
desired  aircraft  state  on  the  reference  trajectory  Predict  ive  information  t rom  tlu* 
reference  trajectory  is  included  as  terms  in  the  contiol  law’s  command  to  minimize  the 

transient  path  tracking,  errors  that  could  occur  durinp.  trajectory  direction  anil  soeed 

chanp.es.  Measurements  of  the  current  aircratt  state  are  provided  by  the  aircratt  ’ s navi 
pat  ion  systems.  The  commands  are  ted  to  the  servo  actuators  in  the  aiiviatl  ’s  tliv.ht 
control  system  for  translation  into  cont  rol  surface  and  throttle  d i sp  l acement  s , In  the 
manual  mode,  tlu*  cont  rol  law  provides  at  t i t tide  and  t hrot  t 1 e commands  on  the  Alt  i t ude 
Director  Indicatin'  (ADI). 

The  pilot  ' s ability  t o communicate  with  the  system’s  illv.it  a l computet  will  determine  the 
system’s  usefulness  I n f he  cockpit  Pilot  workload  is  reduced  bv  the  automatic  c»'mput  a 
t ion  ot  the  mission  trajectory  These  trajectories  must  be  displayed  relative  t v tlu* 
tactical  situat  ion  so  the  pilot  can  make,  the  decision  t o env.av.e,  modi  tv,  oi  lejeci  them 
(haphic.il  present  at  ion  of  this  informal  ion  is  desirable,  thus  the  system  ut  ilizes  an 


electronic  display,  referred  to  as  the  Situation  Display,  to  present  the  tactical  situa- 
tion. Aircraft  present  position  and  track,  engaged  and  alternate  trajectories,  lethal 
coverage  areas  of  threats,  and  friendly  and  unfriendly  aircraft  locations  are  projected 
in  a selectable  horizontal  or  vertical  format. 


Operations  using  the  interactive  control/display  have  been  structured  to  minimize  both 
the  mental  and  manual  effort  required  for  the  pilot  to  communicate  with  the  system. 
Understandable,  logical,  and  reasonably  simple  procedures  have  been  established  for  pilot 
interaction  using  a combination  of  electronic  displays,  dedicated  and  multifunction  con- 
trol keys,  a hand  controlled  crosshair  (on  the  Situation  Display),  and  computer  automation. 

Data  supplied  via  the  tactical  digital  communication  system  is  automatically  input  to  the 
trajectory  generator,  the  interactive  control / display , and  the  Situation  Display.  Modifi- 
cations of  the  present  profile  or  a new  trajectory  are  computed  with  the  trajectory  gener- 
ator and  displayed  on  the  Situation  Display  in  response  to  new  threats  or  C“  inputs.  If 
required,  the  system  presents  an  anticipatory  engage  profile  presentation  on  the  inter- 
active control/display  to  simplify  the  Dilot's  flight  management  task. 

2.2  Operational  Capabilities 

The  United  States  Air  Force  flys  a large  percentage  of  its  peace-time  missions  in 
controlled  airspace  with  a mix  of  civil  and  military  aircraft  on  prescribed,  preplanned 
routes.  Current  cockpit  equipment  has  sufficient  capability  to  meet  the  demands  of  this 
type  mission.  However,  in  times  of  conflict  when  seemingly  well-planned  missions  become 
confused  by  enemy  ground  forces  (AAA,  SAMs)  and  enemy  aircraft,  a more  flexible  system  is 
required  to  unburden  the  pilot  during  and  after  these  distractions. 

The  IFTC  system  has  been  designed  with  this  volatile  operational  environment  in  mind.  The 
IFTC  trajectory  generator  accepts  new  points  from  the  data  link  (C— ) and  computes  a new 
trajectory,  after  considering  aircraft  performance  parameters,  threats,  and  mission  con- 
straints, to  produce  a flvable  trajectory.  The  Situation  Display  presents  the  trajectory. 
This  newly  computed  trajectory  is  presented  as  a dashed  line  to  distinguish  it  from  the  en- 
gaged profile.  This  method  of  presentation  was  selected  to  aid  the  pilot  in  recognizing 
that  he  has  been  directed  to  another  target  or  that  a threat  avoidance  zone  has  been  dis- 
covered in  this  engaged  flight  oath.  This  relieves  the  pilot  of  a significant  amount  of 
work  such  as  computing  has  speed/time  profiles  and  fuel  requirements  to  complete  the 
mission  since  this  dashed  profile  is  defined  as  being  a physically  flyable  alternative. 

This  change  need  not  have  been  inserted  via  data  link,  but  could  have  been  input  by  the 
pilot  using  the  keyboard  to  enter  latitude  and  longitude  or  the  range  and  bearing  of  new 
trajectory  points.  This  operation  is  greatly  simplified  by  using  the  hand  controlled 
crosshair  to  designate  new  point  locations  on  the  Situation  Display. 

The  capability  for  acceptance  of  data  linked  information  into  the  cockpit  for  display 
and  automatic  input  into  the  trajectory  generator  exhibits  the  potential  for  a signifi- 
cantly greater  amount  of  pertinent  tactical  information  to  be  received  and  evaluated  by 
the  pilot.  This  automation  is  accomplished  while  maintaining  the  necessary  feature  of 
permitting  the  pilot  to  scrutinize  the  incoming  data  and  have  the  final  decision  authority. 
Without  this  capability,  the  visual  recognition  and  the  manual  insertion  of  incoming  data 
would  saturate  the  pilot  in  very  short  order. 

The  parameters  that  can  be  specified  with  each  point  of  the  trajectory  are  not  limited  to 
latitude,  longitude,  altitude  and  time  but  such  parameters  as  heading,  flight  path  angle, 
turn  radius  and  speed  are  accepted.  These  parameters  can  be  inserted  and  the  trajectory 
generator  automatically  computes  the  profile.  This  capability  lends  itself  to  weapon  de- 
livery missions  in  low  visibility  conditions  where  the  aircraft' s heading,  flight  path 
angle,  and  speed  must  be  controlled  for  the  desired  delivery  path,  which  without  a tra- 
jectory generator  places  a significant  workload  requirement  on  the  pilot. 

It  is  widely  felt  that  the  battle  zones  of  the  next  conflict  will  be  highly  saturated  with 
SAM  and  AAA  implacements . In  this  situation  the  IFTC  threat  avoidance/ least  exposure  com- 
putations are  of  significant  benefit.  Present  methods  dictate  that  the  mission's  pre- 
planned route  avoids  known  implacements.  The  pilot  must  perform  defensive  maneuvers  when 
warned  by  the  on-board  equipment.  It  is  at  these  times  that  the  pilot  begins  to  lose  track 
of  his  position  in  relation  to  the  target  and  especially  of  his  time  schedule.  With  the 
increased  capabilities  afforded  by  the  IFTC  system  the  Dilot  will  continue  to  have  control 
of  his  aircraft  to  perform  necessary  defensive  and/or  offensive  maneuvers,  with  his  best 
intercept  back  to  the  original  path  or  a new,  more  direct  path  being  constantly  computed 
and  displayed.  This  continuous  precise  updating  of  the  aircraft  parameters,  such  as 
position,  speed,  time  on  target,  and  fuel  remaining,  which  can  be  transmitted  to  C-  via 
the  secure  data  link  will  significantly  aid  the  C^  capability  to  utilize  the  strike  forces 
to  their  greatest  advantage.  Knowing  the  fuel  situation  of  each  aircraft  is  beneficial 
in  the  prioritizing  of  the  refueling  operation  without  a high  level  of  voice  communication. 

o 

The  flight  management  capabilities  provided  by  the  IFTC  system  when  centralized  C‘  inputs 
are  provided  by  a digital  data  link  have  been  addressed  above.  However,  when  the  aircraft 
is  operating  autonomously,  or  with  several  other  aircraft  in  a local  area  with  voice  only 
commands  of  a Forward  Air  Controller,  the  IFTC  system  capabilities  are  still  beneficial  in 
reducing  the  computations  and  data  entry  (workload)  requirements  that  are  imposed  by  pre- 
sent data  systems.  Operating  without  benefit  of  data  linked  information,  the  aircraft  can 
respond  in  minimum  time  and  with  minimum  work  effort,  to  radio  contacts  with  controllers. 


— 


A comparison  of  several  Important  gimbal  and  strapdown  characteristics  is  shown  in 
Ft on re  4 . 


In  summary,  it  is  felt  that  the  operational  benefits  derived  from  the  IFTC  system  will 
meet  the  requirements  for  a quick  reaction,  precision  time-space  control  system  while 
providing  the  flexibility  for  O redirects.  The  pilot  workload  is  limited  to  a level  that 
is  equal  to  or  less  than  presently  encountered  in  either  fighters  or  transports. 

3.0  IFTC  DEMONSTRATION  PROGRAM 


The  current  IFTC  program,  which  is  the  outgrowth  of  an  earlier  study  that  applied 
the  IFTC  concept  to  the  terminal  area  control  of  military  transports  1 4 | . I b J . is  applying 
the  system  to  a fighter  vehicle  and  mission.  The  following  has  been  accomplished. 

• The  4-D  trajectory  generation  and  control  law  equations  have  been  developed 
for  a representative  fighter. 

• The  interactive  control/display  operation.  Situation  Display  presentation, 
and  other  cockpit  instrument  outputs  have  been  structured  for  mission  tasks 
typical  of  a fighter  involved  in  air-to-ground  weapon  delivery. 

• Methods  for  automatically  accepting  tactical  situation  data  and  C-  directives 
supplied  by  digital  communication  systems  in  the  trajectory  generator  and  inter- 
active control/displays  have  been  developed. 

• A hybrid  computer  simulation  of  the  above  capabilities  has  been  developed  with 
the  following  features: 

( A cockpit  with  F-16  dimensions,  see  Figure  2 

, An  F-4  aircraft  model 

• Interactive  cont rol/displav , an  electronic  Situation  Display, 
an  electronic  ADI,  and  other  indicators  arc  installed  in  the 
cockpit . 

• The  capability  for  inserting  tactical  digital  data  messages 
as  well  as  voiced  command  and  control  inputs  into  the  cockpit 


Figure  3 shows  the  simulator  configuration.  The  hardware  elements  in  the  simulator  are 
as  follows: 


• Applied  Dynamics  AD-256  Analog  Computer 

• Applied  Dynamics  AD-4  Analog/Hybrid  Computer 
, IBM-370  Digital  Computer 

• Digital  Equipment  Corporation  Model  I’DP-11/20  and  PDP-11/03 
. Hughes  Conograph  Graphic  System 

a Single  Seat  Cockpit 

Man- in- the- loop  testing  in  the  fighter  cockpit  will  demonstrate  and  evaluate  the  IFTC 
system. 

4.0  FOUR- DIMENSIONAL  TRAJECTORY  GENERATION 

The  backbone  of  the  IFTC  concept  is  the  ability  of  the  on-board  digital  computer  to 
generate  a four-dimensional  trajectory  in  space  in  response  to  pilot  or  data  link  inputs. 
The  fundamental  requirements  of  the  trajectory  generator  include  the  ability  to, 

• construct  a curved,  three-dimensional  path  between  points  in  space 
. construct  a "time"  profile 

• verify  a flyable  trajectory 

Each  trajectory  is  constructed  from  a sequence  of  points  and  specified  parameters  asso- 
ciated with  these  points. 

The  4-D  trajectory  is  divided  into,  1)  horizontal  curved  paths  consisting  of  constant  radius 
turns  and  straight  line  segments  used  to  join  successive  points  in  the  mission  profile, 

2)  vertical  paths  made  up  of  constant  flight  path  angles  to  change  altitude,  and  3)  a time 
schedule  and  corresonding  speed  profile.  The  basic  computational  blocks  of  the  trajectory 
generator  are  shown  in  Figure  4.  The  threat  avoidance  equations  determine  if  any  mission 
points  lie  in  the  defined  lethal  airspace  volume  around  each  threat,  or  if  any  straight 
path  between  successive  points  intersects  the  threat  volumes.  If  any  intersections  exist, 
new  trajectory  points  are  created  that  define  a profile  that  avoids  the  threat  volume. 

4.1  Trajectory  Point  Parameters 

The  curved  horizontal  paths  computed  by  the  trajectory  generator  afford  a greater 
flexibility  for  mission  synthesis  by  allowing,  but  not  requiring,  many  parameters  at  each 
point  to  be  specified.  As  a result  a complex,  curved  trajectory  is  computed  with  fewer 
number  of  x,  y,  z (only)  points  needed  for  definition  than  is  possible  with  conventionally 
defined  profiles.  The  complete  point  definition  may  include  the  following  parameters  in 
addition  to  the  required  space  coordinates: 

. TIME  COORDINATE  (DESIRED  TIME -OF -ARRIVALS)  . VERTICAL  FLIGHT  PATH  ANGLE 
. TRACK  ANGLE  . TURN  RADIUS 

. AIRSPEED  . WIND  VECTOR 


4.2.1 


Functional  descr lpt ion 
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Generally  the  function  of  the  point  in  the  mission  determines  which  parameters  will  be 
specified.  For  example,  the  simple  waypoints  used  to  define  the  enroute  navigation  pro- 
file may  only  require  latitude,  longitude,  and  altitude  for  specification,  while  weapon 
delivery  initial  points  (IPs)  may  additionally  require  the  specification  of  track  angle, 
airspeed,  and  time-of-arrival . 


4.2  Threat  Avoidance 


As  described  in  the  introduction,  a dense  threat  environment  will  exist  in  the  future 
tactical  arena.  The  trajectories  computed  by  the  IFTC  system  will  either  avoid  the  lethal 
airspaces  around  the  threats  or,  if  required,  penetrate  the  lethal  airspace  with  flight 
paths  that  minimize  the  aircraft's  exposure  to  the  threat.  The  IFTC  trajectory  generator 
models  the  ground  based  threats  as  vertically  oriented  cylinders  with  radii  and  height 
approximating  the  lethal  range  of  the  threats.  This  threat  envelope  is  adequate  to 
demonstrate  the  action  of  the  trajectory  generator  relative  to  the  threat  data  present 
in  the  IFTC  system. 

Currently,  the  threat  avoidance  equations  use  the  known  threat  locations  and  types  and 
determines  those  profile  segments  which  will  penetrate  the  lethal  range  envelopes.  The 
equations  will  add  points  to  the  original  sequence  of  points  defining  the  trajectory 
that  will  cause  the  trajectory  to  avoid  the  threat  volume  (or  volumes)  by  stretching  the 
horizontal  or  vertical  paths,  Associated  with  these  points  are  the  inbound  and  outbound 
turn  radii,  ground  track  angles,  and  flight  path  angles  needed  to  construct  the  avoidance 
segments.  The  avoidance  segments  are  generated  to  minimize  the  total  deviation  from  the 
original  trajectory.  This  strategy  reduces  the  effect  on  any  time-of-arrival  constraints 
placed  on  the  mission. 

Before  the  IFTC  program  is  completed  the  threat  avoidance  equations  will  be  developed 
further  to  purposefully  allow  penetration  of  the  threat  volumes.  There  are  several  rea- 
sons to  deliberately  penetrate  a threat  volume: 

• The  extra  path  length  to  avoid  the  threat  and  the  corresponding  time  delay 
may  preclude  meeting  the  specified  priority  time  schedule. 

• The  threat  may  be  unavoidable  because  of  aircraft  dynamic  limitations. 

• The  need  for  weapon  delivery  on  a target  within  the  coverage  of  one  or  more 
threats . 

The  strategy  for  deliberate  penetration,  of  course,  will  be  to  minimize  the  aircraft  ex- 
posure to  the  threat. 

4.3  Horizontal  Path  Generation 

To  determine  the  total  horizontal  path,  the  sequence  of  points  defining  the  trajectory 
are  processed  sequentially  in  pairs  by  the  IFTC  horizontal  path  generation  equations  until 
the  mission  list  is  exhausted.  The  horizontal  path  generator  determines  the  shortest  path 
between  the  two  points  in  each  pair  using  an  initial  turn,  a straight  segment  and  a final 
turn.  This  path  type  is  required  only  if  the  second  point,  referred  to  as  the  "to"  point, 
has  a specified  ground  track  angle  to  be  satisfied  at  the  instant  of  flyover,  as  might  be 
the  case  for  weapon  delivery  or  rendezvous  initial  points  (IPs) . 

If  the  track  angle  is  not  specified,  the  horizontal  path  reduces  to  a simple  turn  followed 
by  a straight  segment  toward  the  "to"  waypoint.  Points  with  no  specified  track  angle  are 
used  as  general  navigation  points,  and  the  trajectory  generator  does  not  force  "flyover" 
of  the  points.  The  profile  will  smoothly  and  predictably  transition  from  the  inbound 
course  to  the  outbound  course. 

The  parameters  determined  by  the  trajectory  generation  equations  and  transmitted  to  the 
Simulation  Display,  interactive  control/display,  and  control  law,  when  the  trajectory  is 
engaged,  are  shown  in  Figure  5.  For  two  successive  points,  P,  and  Pj,  defined  by  lattitude 
and  longitude  and  other  pertinent  parameters,  the  horizontal  path  is  generated  by  com- 
puting, 

a.  L and  n,  the  length  and  heading  of  any  straight-line  segment  between  points 
of  tangency  with  turns  at  P^  and  Pj- 

b.  XTR1 , YTR1  and  XTR2 , YTR2  the  coordinates  of  the  points  of  tangency. 

c.  XCR1 , YCR1  and  XCR2,  YCR2,  the  coordinates  of  the  centers  of  the  turns  at 
Pj  and  ?2- 

d.  LCRl , LCR2 , the  length  of  the  curved  path  segment  around  the  turns. 

If  a turn  radius  is  not  specified,  the  trajectory  algorithm  establishes  the  radius  as  a 
function  of  the  specified,  or  a predicted  airspeed,  and  a nominal  aircraft  bank  angle. 

4.4  Vertical  Path  Generator 

For  an  altitude  change  between  point  pairs  the  vertical  path  generator  uses  either 
one  flight  path  angle  (FPA)  for  the  entire  path  between  the  two  points,  when  a flight  path 
angle  has  not  been  specified,  or  two  FPAs  consisting  of  a segment  with  a specified  FPA  and 
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a zero  FPA  segment.  Whenever  aerodynamic  constraints  or  a pilot-specified  FPA  prevents  the 
aircraft  from  changing  altitude  with  only  FPA  changes,  a spiral  descent  or  ascent  is  gen- 
erated to  indicate  to  the  pilot,  via  the  Situation  Display,  how  the  altitude  change  can  be 
made . 
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When  unspecified,  the  FPA  for  the  iC^  point  pairs  is  computed  as 
y^  = tan  ^ ( (H^_ ^ -H^) / i ^ segment  length) 


For  this  type  of  altitude  change  the  aircraft  flies  with  a constant  y.,  for  the  total  seg- 
ment. If  the  FPA  is  outside  the  allowable  range  of  flight  path  angles,  which  is  estab- 
lished by  drag,  available  thrust  and  weight,  a spiral  profile  is  generated  using  the 
technique  described  below. 


The  two-FPA  type  is  used  for  situations  involving  altitude  increases  or  decreases  with 
specified  FPAs.  The  generator  determines  the  position  along  the  horizontal  profile  at 
which  commencing  an  ascent  or  descent  at  the  specified  FPA  will  also  satisfy  the  specified 
altitude  at  the  "to"  point. 


A spiral  maneuver,  is  computed  whenever:  1)  the  altitude  change  for  the  point  pair  cannot 
be  achieved  with  the  specified  flight  path  angle,  or  2)  the  altitude  change  cannot  be 
accomplished  with  a vertical  flight  path  between  the  maximum  and  minimum  flight  path  angle 
constraints  of  the  aircraft.  The  spiral  maneuver  consists  of  circular  turns  with  an 
acceptable  FPA  either  following  the  first  point  in  the  point  pair  or  preceding  the  "to" 
point . 


4.5  Speed/Time  Profile  Generation 

The  speed/ time  profile  generator  computes  both  a speed  profile  and  a time  schedule 
for  the  4-D  trajectory.  The  speed  profile,  which  is  an  airspeed  profile,  and  time  sched- 
ule are  both  functions  of  the  distance  along  the  horizontal  trajectory.  The  speed  profile 
agrees  with  any  specified  airspeeds,  while  the  time  schedule,  which  is  calculated  using 
available  wind  information,  is  computed  to  minimize  the  differences  between  specified 
time  of  arrivals  (TOAs)  and  computed  TOAs.  The  speed  profile  is  generated  with  a minimum 
number  of  speed  changes  to  achieve  a profile  that  is  logical  and  understandable  from  the 
pilot's  point  of  view. 


The  technique  used  in  generating  the  speed  profile  and  time  schedule  involves  computing 
an  acceleration  profile  for  the  aircraft.  This  profile,  which  is  also  a function  of  dis- 
tance along  the  horizontal  path,  consists  of  constant  acceleration  (or  deceleration)  seg- 
ments positioned  along  the  horizontal  path.  Integration  of  the  acceleration  profile 
establishes  the  speed  profile.  The  speed  and  wind  profiles  are  used  to  determine  the  time 
schedule . 

Figure  6 shows  the  primary  computation  blocks  of  the  speed/ time  profile  generator,  which 
iteratively  adjusts  the  acceleration  profile  to  minimize  the  difference  between  the  com- 
puted time  schedule  and  the  specified  TOAs.  This  processing  technique  accounts  for  the 
specified  speeds,  limits  the  speed  profile  so  it  does  not  exceed  the  aircraft's  miximum 
and  minimum  airspeeds,  and  constrains  the  acceleration  profile  so  that  at  any  point  on 
the  trajectory  the  computed  acceleration  (or  deceleration)  does  not  exceed  the  available 
aircraft  acceleration  or  deceleration . The  available  acceleration  and  deceleration  are 
computed  in  terms  of  flight  path  angle,  drag,  weight  and  available  thrust. 

For  ini t ial izat ion  the  speed/time  profile  generator  ignores  the  specified  TOAs  and  deter- 
mines an  acceleration  profile  that  integrates  into  a speed  profile  satisfying  all  speci- 
fied speeds.  The  initial  point  on  the  speed  profile  is  the  current  aircraft  airspeed, 
since  the  first  point  on  all  4-D  trajectories  computed  by  the  IFTC  system  is  the  current 
aircraft  state.  The  initial  acceleration  profile  has  a minimum  number  of  non-zero  accel- 
eration segments  - only  the  number  required  to  change  the  speed  to  agree  with  the  speci- 
fied speeds. 

The  first  step  in  the  iteration  process,  see  Figure  6,  is  to  calculate  the  speed  profile 
and  time  schedule  over  all  the  point  pairs  up  to  and  including  the  point  with  the  first 
specified  TOA.  Then  the  difference  between  the  specified  TCA  and  computed  TOA  for  this 
last  point  is  computed  If  the  TOA  error  is  sufficiently  small,  this  part  of  the  pro- 
file is  complete.  (The  process  is  also  complete  if  the  trajectory  docs  not  have  a 
specified  TOA.)  Otherwise,  the  acceleration  profile  is  perturbed  to  reduce  the  TOA 
error.  (The  technique  for  perturbing  the  acceleration  profile  is  discussed  below.) 

The  iteration  process  continues  with  the  speed  profile  and  time  schedule  being  computed, 
the  TOA  error  determined,  and  acceleration  profile  perturbed  until  either  the  TOA  error 
is  nulled,  or  has  converged  to  a steady  state  value.  Analysis  and  simulation  runs  per- 
formed during  this  program  indicate  this  iterative  technique  is  convergent. 

A non-zero  steady  state  TOA  error  means  the  aircraft  speed  and  acceleration  constraints 
have  been  reached  and  the  acceleration  segments  have  been  positioned  to  minimize  the 
magnitude  of  the  time  error.  In  this  situation,  the  trajectory  generator  is  indicating 
the  aircraft  will  not  meet  the  assigned  TOA.  This  information  is  displayed  on  the 
Situation  Display  for  tie  pilot,  in  case  he  wants  to  modify  the  3-D  trajectory  or  speci- 
fied speeds  to  achieve  he  TOA. 
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^ After  computing  the  speed  profile  and  time  schedule  between  the  aircraft  and  the  point 
with  the  first  specified  TOA , the  process  is  repeated  for  each  set  of  point  pairs  be- 
tween successive  specified  TOAs  until  the  trajectory  is  completed. 

The  technique  used  to  perturb  the  acceleration  profile  and  minimize  the  TOA  error  uses 
parameters  that  define  the  sensitivity  of  the  TOA  error  to  changes  in  the  acceleration 
profile.  The  t i tin.*  error  sensitivity  to  accelerating  (or  decelerating)  the  aircraft 
earlier  or  later  on  the  trajectory  is  used  first  to  adjus*  the  location  of  the  accel- 
eration segments  to  reduce  the  time  error  If  the  equations  determine  that  segment 
repositioning  cannot  further  reduce  the  TOA  error,  then  additional  non-zero  accelera- 
f ion  segment-  r*  added  to  introduce  an  intermediate  speed  in  between  successive  speci- 
fied speeds  Hu*  ■ inn-  error  sens  it  ivit  ies  t o the  value  of  this  intermediate  speed 
and  the  aecolerat  ion  (01  deco  let  at  ion)  value  used  to  make  the  speed  change  are  then  used 
to  make  the  final  perturbations  on  the  accelerat ion  profiLe. 

While  minimum  fuel  u i,*e  was*  not  i de  • i a object  i ve . the  A-D  trajectory  generation  equa- 
tions can  be  modified  to  add  this  capability  The  technique  will  take  into  account  the 
economy  speed  altitude  profile  parameters  output  from  a minimum  fuel  algorithm. 

5.0  THE  CONTROL  1.AW 


The  I FTC  svsrew  has  the  capability  to  am omat  i ca 1 1 y track  the  computer  generated 
three- dimens iona l trajectory  according  to  the  calculated  time  schedule,  or  provide 
guidance  cues  for  display  to  allow  the  pilot  t o rlv  t lie  computer  synthesized  4-D 
trajectory.  The  control  law  processes  measurements  of  the  current  aircraft  state  and 
parameters  defining  the  *-D  trajectory  that  has  been  engaged  by  the  pilot  . For  the 
automatic  operation,  the  control  law  determines  aileron,  elevator,  and  throttle  com- 
mands. For  the  manual  mode,  the  control  law  determines  roll,  pitch,  and  throttle  change 
commands  that  are  displayed  on  the  ADI  for  pilot  interpretation  and  appropriate  action. 


The  control  law  processing  in  the  automatic  mode,  as  shown  in  Figure  7.  is  divided  into 
the  following  computations:  the  reference  state  X^(t*)  and  nominal  control  commands, 
the  trajectory  tracking  error  vector  fiX(t),  and  the  control  command,  U(t).  The  sum  of 
tracking  error  feedback  and  nominal  commands  make  up  the  total  control  command.  Feed- 
back of  the  tracking  errors  minimizes  the  steady  state  spatial  and  time  differences 
between  the  4-D  trajectory  and  the  aircraft.  Feed  forward  of  the  nominal  commands, 
from  the  reference  trajectory,  minimizes  the  transient  tracking  errors  that  can  occur 
during  turns,  changes  in  altitude,  and  periods  of  acceleration. 


The  definition  used  for  t he  reference  state,  X.(t).  which  is  differenced  with  the  air- 
craft state  to  compute  the  tracking  error,  has  a pronounced  effect  on  the  control  law 
performance.  For  the  IFTC  system  the  reference  state's  x,  v components  are  defined  by 
the  location  on  the  desired  horizontal  path  that  is  the  closest  point  to  the  aircraft. 

The  time  t*  is  the  time  the  aircraft  should  have  been  at  the  reference  state.  When  the 
tracking  error  vector  is  calculated  with  this  reference  state,  the  cross  track  distance 
error  and  time  error  can  be  made  separate  components.  This  separation  prevents  cross 
axis  coupling  between  time  error  and  lateral  error  being  introduced  hv  (he  tracking 
error  feedback  through  the  control  law;  i.e.,  time  errors  do  not  cause  cross  track 
errors  and  cross  track  errors  do  not  cause  time  errors.  Figure  8 represents  the  dis- 
tinctions between  the  current  aircraft  locations  (x(t) , v ( t ) ) , the  desired  aircraft 
location  on  the  reference  trajectory  (xq(0 , YqO)),  and  the  reference  state  (Xq(i*) , 
y0( -*)) • The  cross  track  distance  error  is  5 xU  and  the  time  error  is  fit  = t*-tV  This 
reference  state  definition  is  consistent  with  Shat  other  invest  igators  | b,7 1 that  are  con- 
cerned with  tracking  a time  based  trajectory  have  used  in  their  control  law  mechanization. 

Expressed  in  terms  of  the  tracking  error  components  and  the  nominal  control  commands, 
the  equations  for  the  aileron,  elevator,  and  throttle  change  commands  are  as  follows: 


% - GllSxc  + G12V*  + V*0  -♦> 

fie  = 

flT  = C35St  + G36Vc'1'SV  + Vo 


(1) 

(2) 

(3) 


with  Sip  the  track  angle  error,  «z  the  altitude  error,  the  flight  path  angle  error, 

SV  the  ground  speed  error,  V„  the  computed  ground  speed,  the  nominal  bank  command, 

A„  the  nominal  acceleration  command,  and  ^ the  current  aircraft  roll  angle.  Each  tra- 

jectory tracking  error  is  the  difference  between  the  value  on  the  reference  trajectory 
at  time  (t*)  and  the  current  aircraft  measurement.  The  nominal  commands,  which  include 
the  flight  path  angle  tg  that  is  part  of  the  Sy  error,  are  valid  at  time  t*  with  antici- 
pation times  added  whetvthe  reference  trajectory  has  an  abrupt  change  in  roll,  flight 
path  angle,  or  acceleration. 

The  reference  state  and  control  law  have  been  structured  so  that  each  command  will  handle 
a single  dimension  of  the  tracking  problem,  with  proportional  plus  rate  feedback  pro- 
vided in  each  command.  The  proportional  feedback  nulls  out  the  displacement  error  and 

rate  feedback  provides  path  damping.  In  the  IFTC  program  where  the  control  law  is 

implemented  in  a hybrid  simulator,  aircraft  stability  is  augmented  with  roll  rate 
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damping  added  to  Che  aileron  command,  a blend  of  pitch  rate  and  normal  acceleration 
added  to  the  elevator  command,  and  yaw  rate  feedback  for  Dutch  roll  damping  and  lateral 
acceleration  feedback  for  turn  coordination.  The  feedback  gains  have  been  selected 
using  classical  analysis  techniques.  The  gains  will  be  verified  during  the  testing  with 
an  F-4  aircraft  model  in  the  simulator. 

To  be  consistent  with  the  trajectory  generator's  method  for  computing  turns,  the  nominal 
roll  command  will  be  time  varying  during  each  turn.  The  trajectory  generator  uses 
constant  radius  turns  with  a constant  airspeed  in  generating  curved  t ra jectories . Con- 
sequently, the  desired  ground  speed  and  bank  angle  are  functions  of  the  predicted  wind 
magnitude  and  direction  and  the  current  aircraft  location  on  the  turn. 

In  the  simulator  the  pilot  will  be  able  to  override  the  control  law's  automatic  aileron 
and  elevator  commands  by  applying  force  to  his  flight  control  stick,  or  he  can  override 
the  throttle  command  by  disengaging  the  throttle  servo.  This  is  an  operational  advan- 
tage because  it  allows  the  pilot,  with  a minimum  of  effort,  to  deviate  from  the  engaged 
profile  for  such  things  as  evasive  maneuvers  and  terrain  shadowing. 

However,  after  the  manual  override  has  been  removed  it  is  difficult  for  the  linear  feed- 
back control  law  given  by  Eqns.  (1),  (2)  and  (3)  to  return  the  aircraft  to  the  engaged 
4-D  trajectory  if  there  are  large  position,  speed  or  time  tracking  errors  present.  To 
handle  these  errors  the  control  law  operation  has  been  integrated  with  the  trajectory 
generator.  When  a large  position  tracking  error  exists,  the  trajectory  generator  com- 
putes a 3-D  capture  segment  from  the  current  aircraft  location  to  the  next  point  on  the 
engaged  trajectory  and  computes  a revised  speed  and  time  schedule  for  the  complete  tra- 
jectory, including  capture  segment.  When  a large  speed  or  time  error  exists,  only  a 
revised  speed  and  time  schedule  are  calculated.  The  control  law  then  uses  this  new 
trajectory  as  its  reference,  and  since  the  tracking  errors  are  now  small,  a stable  con- 
trol system  operation  results. 

6.0  CONTROL  DISPLAY  INTEGRATION 

Real-time,  in-flight  management  by  the  pilot  of  complex  four-dimensional  trajec- 
tories imposes  new  and  stringent  requirements  on  the  display  system. 

Pilots  presently  spend  approximately  2-3  hours  preplanning  for  each  hour  of  mission  flight 
time.  During  the  planning  process  they  consider  the  waypoints,  arrival  times,  flight 
routes  and  aircraft  fuel  and  performance  limitations  to  arrive  at  a combination  of  flight 
segments  (a  trajectory)  that  will  accomplish  the  mission.  The  pilot  is  assisted  in  this 
planning  process  by  printed  material  that  helps  him  visualize  the  aircraft  potential 
path  in  space  during  such  complex  maneuvers  as  steep  curved  descents.  As  a result  of 
this  mission  preplanning,  the  pilot  acquires  a thorough  understanding  of  the  mission  pro- 
file and  the  information  requirements  and  constraints  on  which  it  is  based. 

The  IFTC  trajectory  generator  generates  a complex  trajectory  that  is  a function  of  time- 
space  position  coordinates.  This  mission  profile  is  new  to  the  pilot  and  it  may  have 
to  be  modified  in  flight  to  meet  changing  mission  requirements,  or  even  to  achieve  the 
original  mission  requirements  after  unforeseen  disruptions  of  the  original  profile. 

Thus  an  analysis  of  control  display  system  requirements  for  a system  containing  an  on- 
board trajectory  generator  reveals  two  significant  differences  from  current  systems. 

These  new  requirements  are  found  in  the  area  of: 

1.  Providing  sufficient  information  to  the  pilot  to  understand  the  newly 
generated  trajectory  in  preparation  for  acceptance/engagement. 

2.  Providing  in-flight  confidence  building  information  of  aircraft  situation 
with  respect  to  command  situation. 

Research  programs  (STOLAND  |6|,  Terminal  Configured  Vehicle  - TCV)  have  demonstrated  the 
usefulness  of  electronic  horizontal  map  displays  to  provide  the  pilot  with  a readily 
understood  graphic  view  of  the  aircraft  with  respect  to  the  trajectory  and  significant 
terrain  features. 

The  STOLAND  and  TCV  also  demonstrated  the  desirability  of  electronic  displays  of  atti- 
tude and  flight  director  command  information  and  the  need  for  an  electronic  alphanumeric 
display  for  data  entry.  The  initial  feasibility  study  of  the  IFTC  application  in  a 
transport  aircraft  utilized  a display  system  containing  electronic  attitude  and  flight 
director  information,  horizontal  map  information  and  alphanumeric  system  information 
14].  It  demonstrated  the  use  of  a special  crosshair  symbol  on  the  Situation  Display  as 
a graphic  means  of  creating  new  or  modifying  old  waypoint  and  trajectorv  information. 

The  transport  program  also  demonstrated  the  usefulness  of  providing  a level  of  computer/ 
pilot  interaction. 

The  control  display  implementation  for  the  fighter  demonstration  is  built  on  the  know- 
ledge gained  in  the  transport  program.  Electronic  displays  provide  attitude  information 
(with  roll,  pitch,  and  throttle  commands),  situation  (horizontal  and  vertical)  informa- 
tion, and  system  alphanumeric  information.  The  concept  of  computer/pilot  interaction 
was  developed  to  a higher  level  during  the  fighter  demonstration  study  by  providing 
mission  oriented  mode  controls  and  expanded  man/machine  interaction  (through  digital 
processing)  for  mission  and  data  management. 


The  qyro  torqulnq  current  is  used  to  develop  a voltaqe  across  precision  resistors.  A solid 
state  switch  is  employed  to  provide  two  ranges  of  operation,  thus  extending  the  dynamic 
range  of  the  electronics  to  that  provided  by  the  gyroscopes.  A "wash",  or  polarity  reversal, 
technique  is  Incorporated  to  effectively  eliminate  corn  ami  nut  ion  of  the  data  by  bias  vol- 


The  need  for  additional  vertical  information  for  in-flight  management  of  the  generated 
flight  plan  was  recognized  during  the  initial  transport  simulation  program  when  complex 
spiral  descents  were  generated  to  demonstrate  the  system  capability  to  link  together 
two  points  that  are  close  together  in  latitude  and  longitude  but  widely  separated  in 
altitude.  Thus  a vertical  profile  display  consisting  of  a view  of  flight  plan  altitude 
as  a function  of  along  track  distance  is  presented  in  the  fighter  cockpit  as  the  Vertical 
Situation  Display  (VSD)  mode  of  the  Situation  Display.  This  presentation  was  chosen 
because  of  its  similarity  to  the  altitude/distance  view  pictorial  information  generated 
during  mission  planning  or  briefing  sessions.  Under  mode  control  of  the  pilot,  then, 
the  Situation  Display  shows  either  a simple  horizontal  map  or  a vertical  map.  This 
combination  of  horizontal  and  vertical  profile  mapping  information  is  being  investigated 
as  a means  of  providing  the  pilot  with  a more  rapid,  complete  understanding  of  the 
generated  profile. 

Requirement  2,  the  need  to  provide  the  pilot  with  situation  information  with  respect  to 
commanded  situation,  is  addressed  in  the  fighter  demonstration  program  by 

1.  Providing  the  vertical  situation  mode  on  the  Situation  Display,  and 

2.  Modifying  the  vertical  scale  air  data  displays  to  provide  computer  driven 
readouts  of  command  altitude,  command  Mach,  and  command  airspeed  quant  it ively 
and  with  respect  to  actual  flight  values. 

An  additional  requirement  imposed  for  the  fighter  demonstration  study  was  the  requirement 
to  demonst rate  the  integration  of  digital  data  link  command  and  control  and  tactical 
situation  informat  ion  with  the  1FTC  system.  This  combination  is  very  complementary! 

Data  linked  command  and  control  information  consisting  of  waypoint,  threat,  or  target 
locations  and  TOAs  is  readily  accepted  as  inputs  to  the  trajectory  generator.  A trajec- 
tory  is  generated  based  on  the  command  and  control  requirements  and  on  aircraft  con- 
straints and  is  computed  for  the  pilot.  With  the  1FTC  system  the  pilot  has  the  advantage 
of  being  able  to  review  the  data  linked  information  as  an  integrated  whole  on  a familiar 
format.  He  knows  that  the  trajectory  generator  has  considered  speed,  fuel,  maneuvera- 
bility and  stored  tactical  information  with  the  data  linked  command  and  control  require- 
ments to  arrive  at  the  trajectory  shown. 

The  control  display  system  is  shown  installed  in  the  fighter  cockpit  in  Figure  9,  with 
the  following  major  features: 

• It  is  designed  for  one-man  operation. 

• It  considers  the  information  requirements  of  the  IFTC  system  and  advanced 
command  and  control  operation. 

• It  provides  mission  oriented  mode  selection. 

• It  extends  the  use  of  interactive  control /display  software  to  minimize  the 
pilot's  information  management  tasks. 

• It  explores  the  use  of  trajectory  generator  outputs  as  a means  of  providing 
the  pilot  with  a higher  level  of  decision  making  information  than  is  possible 
without  the  trajectory  generator. 

The  basic  flight  displays  of  indicated  airspeed,  attitude,  altitude,  and  horizontal 
situation  information  are  arranged  in  the  familiar  ”T"  scan  pattern  used  in  many  Air 
Force  aircraft.  The  interactive  control /display  and  associated  mode  controls  arc 
located  on  the  left  side  of  the  front  panel.  The  alphanumeric  keyboard  and  dedicated 
data  management  keys  are  located  on  the  left  console  beneath  the  throttle. 

The  S i t ua  t i on  Display,  shown  in  F i gure  10.  p rov i do  s ho  r i zon t a 1 sit  ua t i on  in  fo rma t i on . 
i.e.,  a simplified  map  of  t lie  waypoints,  threats  and  the  trajectory  (solid  line)  being 
flown  between  waypoints.  In  addition,  a computed,  but  not  engaged,  trajectory  is 
shown  as  a series  of  dashed  lines.  Threat  information,  such  as  surface- t o-a i r missile 
envelopes  and  unfriendly  aircraft,  are  displayed  in  appropriate  locations  on  the  Situa- 
tion Displav.  There  are  two  modes  of  horizontal  situation  information:  Track  up  and 
North  up.  In  addition,  the  HSI  mode  displays  a compass  rose  with  the  aircraft  in  the 
center  much  in  the  same  manner  as  an  electromechanical  Horizontal  Situation  Indicator 
(HSI).  The  Vertical  Situation  Mode  (VSD)  of  the  Situation  Displav  provides  an  altitude 
vs  along  track  distance  format  of  vertical  profile  information.  This  vertical  profile 
display  was  specifically  generated  to  enable  the  pilot  to  get  a better  understanding  of 
the  three-dimensional  aspects  of  the  newly  generated  trajectory. 

The  interactive  display,  shown  in  Figure  11.  is  a CRT  presenting  system  mode,  trajectory 
related  data,  and  status  information  in  alphanumeric  form.  This  information  is  presen- 
ted in  special  formats  to  simplify  the  procedure  for  pilot-system  interaction.  The 
interaction  is  accomplished  with  a combination  of  dedicated  and  multifunction  control 
keys,  and  hand-operated  crosshair  (on  the  Situation  Display),  and  computer  automation, 
see  Figure  11.  Decision  trees  for  tin  control/display  part  of  the  computer  program 
have  been  developed  that  establish  a reasonable,  simple  and  logical  man-machine  inter- 
action procedure.  Rv  anticipating,  in  certain  situations,  what  display  format  the 
pilot  will  need  for  the  next  interaction  step,  computer  automation  is  being  used  to 
minimize  the  number  of  detailed  instructions  (and  kev  actuations)  needed  to  control  a 
system  with  this  flexibility  and  capability. 


Over  JO  formats  have  been  developed  for  the  interactive  display  ti>  handle  the  data 
necessary  for  three  active  mission  modes  (NAVigation,  RED  weapon  delivery,  and  RDZ- 
remkwous)  , waypoints,  targets,  refuel  points,  mission  plans,  threats,  data  link,  and 
map  display  dec  1 ut ter/ c lut t er  options.  Some  formats  hiphl ight certain  information  with 
reverse  video,  where  the  color  relationship  of  the  characters  and  their  immediate  back- 
ground is  reversed,  see  Figure  10.  The  reverse  video  cues  the  pilot  to  particular 
information  or  designates  the  information  selected  by  t lie  pilot  via  the  row/column 
switches  immediately  to  the  left  of  and  below  the  display.  Mission  oriented  mode 
select  formats  are  presented  whenever  one  of  the  seven  mode  select  keys  are  pressed, 
with  mode  and  trajectory  selection  being  a three-step  process: 

1.  Select  the  proper  mode  from  the  seven  dedicated  switches. 

2.  Review  the  mission  oriented  select  format  (see  Figure  10)  on  the  interactive 
displav.  editing  it  as  desired  to  reflect  pilot  needs. 

F.ngage  the  mode  and/or  trajectory  --  to  actuate  the  control  law  --  bv 
p r e s s i ng  t he  ENGAGE  key. 

The  l FTC  system  will  accept  the  point  informat  ion  generated  either  by  the  pilot  or  by  a 
command  and  control  element  via  digital  data  link.  The  incoming  point  information  is 
examined  for  completeness  and  processed  by  the  trajectory  generator  into  a four-dimen- 
sional trajectory  (x.  v.  z and  time)  capable  of  being  flown  by  the  aircraft.  If  the 
incoming  data  is  not  complete,  an  appropriate  message  is  placed  on  the  interactive 
display  indicating  the  data  deficiencies.  The  trajectory  generated  is  displayed  on  the 
Situat ion  Display  in  a dashed  line  format  to  indicate  that  it  is  available  for,  but  is 
not  engaged  for.  flight  control,  see  Figure  10.  An  appropriate  select  formal  is  simul- 
taneously (Figure  10)  placed  on  the  interactive  display  indicating  to  the  pilot  that 
the  new  plan  may  be  engaged  simply  by  pressing  the  ENGAGE  key.  Should  t lie  pilot  wish 
to  review  additional  information  about  the  plan,  he  would  press  the  DATA  key  and  look 
at  any  level  of  detail  that  lie  wishes  to  examine.  This  example  illustrates  how  the 
computer  automatically  computes  and  displays  trajectories,  from  pilot  or  data  link 
inputs,  and  places  the  next  logical  format  on  the  interactive  display,  thus  simplifying 
the  pilot's  task  of  engaging  or  changing  the  mission  trajectory  or  mode. 

For  control  of  the  simulator,  the  cockpit  is  configured  with  a standard  right  hand 
force-actuated  control  stick  and  a left  hand  throttle.  The  control  stick  contains 
multiple  pushbuttons  to  control  weapon  release.  Automatic  Flight  Control  engage/di  sen- 
gage.  aircraft  trim  and  the  intercom.  The  throttle  grip  has  the  control  switches  for 
the  Situation  Display  crosshair,  the  speed  brake  and  the  autothrottle  on/off  switch. 

The  Electronic  ADI  (EADI)  in  the  top  center  of  the  front  panel  (Figure  10)  is  a conven- 
tional electronic  attitude  display  with  horizontal  and  vertical  flight  director  commands 
plus  a moving  tape  throttle  command  display  on  the  left  wing  of  the  miniature  aircraft 
symbol.  The  two  air  data  vertical  scale  instruments  on  either  side  of  the  F.AD1  are 
modified  to  provide  a computer-driven  indication  of  the  relative  direction  and  magnitude 
of  command  airspeed.  Mach,  and  altitude  with  respect  to  the  present  aircraft  flight  values 

7.0  SYSTEM  TESTING 


The  I FTC  system  will  be  demonstrated  and  evaluated  in  a man- in- the- loop  simulation 
by  applying  the  capabilities  of  the  system  in  a realistic  tactical  scenario  with  changing 
mission  requirements  and  unannounced  disruptions,  i.e.,  SAMs  in  direct  line  of  flight. 

Six  USAF  pilots,  on  active  duty,  will  he  used  as  test  subjects  for  the  evaluation.  As 
a basis  for  comparison,  a cont rol/displ av/navigat ion  system  possessing  capabilities 
similar  to  those  installed  in  present  operational  aircraft  will  be  implemented  and  flown 
bv  each  of  the  subject  pilots.  The  overall  mission  performance  of  the  test  subjects, 
using  the  expanded  flight  management  capabilities  of  t lie  I FTC  system,  will  be  compared 
to  their  performance  using  the  baseline  system. 

Air-to-ground  weapon  delivery  missions  in  a hostile,  tactical  environment  will  he  simu- 
lated. Each  pilot  will  fly  a mu 1 t i segment ed  mission  in  the  1 FTC  simulator  and  a similar 
mission  using  the  baseline  system  for  navigation  and  weapon  delivery.  Each  pilot  will 
start  the  simulation  on  a preplanned  mission  that  consists  of  an  initial  refuel,  a route 
over  the  FERA  to  the  target,  and  a route  hack  to  friendly  territory  to  another  refuel. 

The  mission  includes  a number  of  time  critical  tasks  and  disruptions  that  will  be  used 
to  demonstrate  t lie  usefulness  of  real  time  trajectory  generation  and  control  capabili- 
ties. Examples  of  the  time  critical  events  and  disruptions  are  the  following: 

9 Rendezvous  for  in-air  refuel 

0 Cross  a waypoint  on  the  FERA  inbound  to  target  zone  with  specified  time  of  arrival 

, Enroute  update  of  target  coordinates 

0 Encounter  unfriendly  aircraft 

0 Encounter  SAM  throat  on  trajectory 

# Weapon  delivery  on  primary  target  with  specified  time  of  arrival 

0 Redirect  to  now  second  target  with  specified  arrival  time 

0 Redirect  t o new  ogress  route  with  specified  arrival  time 

# Set  up  and  rendezvous  with  new  tanker  for  refuel 


o- 1 c) 


4 . 2 . 2 . 4 strapdown  System  Outputs 

The  raw  data  are  received  from  the  I MU  and  compensated.  The  subsequent  integration  uti- 
■xx Bntjoo  Kntt.!  alaorithm  for  the  quaternion  representation  ot  attitude. 


hi: 


The  evaluation  will  compare  the  IFTC  performance  with  the  baseline  performance  under  two 
operational  conditions.  The  first  condition  will  supply  the  information  via  simulated 
data  link  to  the  alphanumeric  displays,  in  the  case  of  the  baseline  system,  and  auto- 
matically into  the  trajectory  generator  and  displays  in  the  IFTC  system.  Information 
for  the  second  condition  will  come  into  the  cockpit  from  a controller  via  the  pilot's 
headphone  for  both  the  IFTC  and  the  baseline  system.  Each  subject  will  then  be  required 
to  utilize  the  capabilities  available  to  complete  the  mission  requirements. 

The  experimenter  will  act  as  a command  and  control  element  to  set  up  the  various  diver- 
sions via  either  voice  link  or  digital  data.  The  pilot's  data  management  task  will  be 
to  review  the  incoming  data,  inputting  it  as  necessary  to  satisfy  the  requirements  of 
either  the  IFTC  system  or  the  baseline  system.  His  primary  tasks  will  be  to  fly  the 
aircraft  so  as  to  make  good  the  various  required  arrival  times  and  complete  the  required 
weapon  deliveries  accurately  and  on  time.  He  will  be  expected  to  perform  the  navigation 
functions  required  by  each  system  to  complete  the  mission. 

The  systems  will  be  assessed  qualitatively  with  questionnaires  administered  before  and 
ifter  the  tests  and  quantitatively  by  analyzing  tracking  error  and  man/machine  inter- 
action time  and  data  entry  errors. 

CONCLUSION 

In  conclusion,  the  Integrated  Flight  Trajectory  Control  concept,  when  applied  to 
the  tactical  fighter  and  transports,  will  result  in  more  efficient,  timely  operation  in 
the  tactical  environment.  IFTC  is  the  synergistic  culmination  of  flight  control,  navi- 
gation management  and  display  technologies  combined  with  today's  highly  efficient 
digital  computers,  which  can  and  will  result  in  a more  efficient  air  warfare  system 
with  reduced  pilot  workload. 

Although  the  pilot-in-the-loop  testing  for  the  IFTC  system,  as  applied  to  the  tactical 
fighter  scenario,  is  still  approximately  one  month  away  (June  1978),  sufficient  testing 
has  been  done  in  the  analytical  effort  and  in  the  transport  cockpit  using  tactical 
transport  scenarios  to  promote  a high  confidence  level  that  the  same  efficient  operation 
will  result  in  the  fighter. 

The  control  functions  and  the  sophisticated  trajectory  generator  alone  serve  to  relieve 
the  pilot  of  many  time  consuming,  burdening  tasks.  This  allows  him  the  proper  time  to 
utilize  the  sophisticated  strike  systems  with  the  net  result  of  a higher  mission  success 
probability.  This  is  especially  true  when  considering  the  emphasis  on  command  and 
control  which  will  result  in  vast  quantities  of  information  being  transmitted  to  and 
from  the  cockpit.  This  information  will  be  of  great  benefit  when  managed  properly  in 
the  cockpit. 
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Figure  1.  The  IFTC  Control  System  Block  Figure  2.  IFTC  Cockpit  Simulator. 
Diagram. 
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Figure  3.  Simulator  Elements. 
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Figure  4.  Trajectory  Generator  Block  Diagram. 
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Figure  5.  Parameters  Calculated  by  Hori- 
zontal Path  Generator. 


Figure  6.  Speed/Time  Computational  Flow 
Diagram. 
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Figure  7.  Control  Law  Block  Diagram.  Figure  8.  Reference  State  Definition. 


Figure  9.  I FTC  Control  Display  System. 


As  mentioned  before,  the  computers  run  identical  but  nonsynchron I zed  software.  This 
feature,  which  is  imposed  by  computer  hardware,  lias  resulted  in  an  undesired  effect.  .n 

.......  i_* — Ur.-tu: — > >nu — j_o — LLiLu h 1 iihnr £^i_i_LLLiiL?_  ♦ h rnnhn  1 Ha  . In  paki'  nf  t ho  st  randnwn  ‘/ * / J 
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7 . ABSTRACT 

The  paper  starts  with  design  considerations  and  a brief  description  of  the  CCV-F104  pro- 
ject. A detailed  part  is  devoted  to  the  strapdown  subsystem  design  considera tion  and 
realisation.  The  hardware  and  software  mechanization  of  the  integrated  guidance  and  con- 
trol system  of  the  CCV-F104-G  is  explained  with  special  focussing  on  the  strapdown  part. 
This  includes  the  solution  to  the  redundancy  problem. 

Finally  the  next  feasible  steps  in  system  improvement  and  minimization  of  the  inertial 
part  are  outlined. 


2.  DATA  REQUIREMENTS  FOR  GUIDANCE  AND  CONTROL 

The  basic  signals  needed  to  augment  the  aircraft  are  rates.  However,  if  the  requirements 
are  tougher,  angle  of  attack  and  sideslip  angle  as  well  as  attitudes  and  flight  path 
angle  are  requested. 

These  requirements  increase,  as  more  as  the  aircraft  performance  requirements  are  increa- 
sing, leading  to  the  Control  Configured  Vehicle  (CCV)  concepts.  Since  navigation  and 
guidance  and  control  are  using  the  same  information  the  natural  question  arises,  if  their 
needs  can  not  be  satisfied  using  a common  signal  source. 

They  obviously  can  as  the  following  table  shows. 


FUNCTION 

CONVENTIONAL 

INTEGRATED 

MECHANIZATION 

MECHANIZATION 

NAVIGATION 

Gimbal  INS 

S/D  INS 

Position 

.. 

H 

Velocity 

M 

Attitude 

" " 

II  II 

CONTROL 

Attitude 

Gimbal  INS  or  AHRS 

S/D  INS 

Att.  Rate 

Rate  Gyros 

I. 

Body-Axis  Acceleration 

Accelerometers* 

I. 

Altitude 

Air  Data  Sensors 

Air  Data  Sensors 

Angle  of  Attack 

Incidence  Sensors 

Derived  from  S/D 

Angle  of  Sideslip 

H 

» ••  * 

Airspeed 

Air  Data  Sensors 

Air  Data  Sensors 

GUIDANCE 

(Required  data  available 

from  above  items) 

* Or  computationally  derived  from  Gimbal  INS 

**  Feasible  'practicality' 

yet  to  be  proven 

Figure  1.  Information  requirements  for  navigation,  guidance,  and  control. 


As  the  above  table  expresses,  there  are  two  candidates  for  the  heart  of  the  sensor  system 


Gimbaled  platforms 
plus 

Rate  Sensors 
plus  eventually 
Accelerometers 


vs 


Strapdown 

Navigation 

Systems 


1 nv  reas  i nu  ojK'iat  lon.u  u>»|ul  uMiu’nt  s le'ad  I o le’dundant  nav  lij.it  ion  system:.,  .1  I ,ir(  whu'li  l: 
ot  »|mm(  impot t ance  to  a common  siunal  source’  solution.  The  st  abt  l t /.it  tori  and  control 
system  ot  a modern  combat  airplane  Is  viovorne'd  by  t edundaney  1 evju  1 1 ement  s . Cost  etlective 
ness  cons  Kiel  at  lv>ns  loimei  ly  vl  K1  not  peimit  the  use  ot  1 edundant  navKiat  Km  systems  in 
IKihtet  aircraft.  Todays  st  1 apvlown  development  ts  stronuly  point  t nu  towards  a redundant 
common  sensor  solution  which  still  is  cv'st  etleetive. 


1.  WHY  ST UAl' DOWN  ? 

It  is  apparent  t 1 v>m  t he'  precevlinvj  discussion  that  a st  1 apvlown  system  is  an  Kleui  tliahl 
nMerence  sensor.  A st  1 apvlown  system  operated  in  con  iunct  ion  with  appropriate*  ail  data 
sensors,  provides  all  intoimation  rcvpiire'd  tot  vehicle  guidance,  navigation,  ami  control 
Ke'cont  stuvlles  eonducte’d  by  Uoeinvj  (l|  have*  ivik’  1 udevl  that  an  i nt  out  at  c*vl  st  r apvlown  ail 
data  t l K|ht  releience  system  can  be  cost  et  tort ive  even  it  navigation  1 unctions  aie  not 
revpitied.  On  this  basis  strapdown  prov  ivies  hivjh  accuracy  inertial  nav  Kjat  ivm  at  no  addi- 
t Iv'na  l cos t . 


Despite  the  tai  ureate'i  ut  t 1 i t y 'of  a st  rapvlown  nre’ohan  i /at  i on  there  is  a natural  t endency 
tv>  evaluate  i t s merits  by  compaiison  with  a convi'nt  i ona  1 uimbnl  inertial  navigation 
sy st em. 


1 


Flame  . Simplified  block  diauram  of  a uimbaled  plattv'im 


Fiviure  shv'ws  a hlvihly  simplified  block  diauram  of  a ulntbal  inettial  system.  The  vjyros, 
aimbal  se'ivos,  ami  uimbals  hv'Kl  the  accel  ei  omet  e»  t 1 i avl  a 1 tuned  with  the'  releience  coot 
diiiato  system.  The  uyros  are  physically  toraue'd  by  the  eornput  ei  in  onlei  tv'  maintain  this: 
alKjnment.  Th«'  primary  contput  a t tona  l t unctions  are  the'  i nt  oqt  at  i v'n  v't  acce  1 ei  at  i on  t o ob 
tain  velocity,  the  inte.jrat  tv'n  v't  velocity  tv'  obtain  pv'sit  tv'n,  anil  the  computat  iv'rr  v't  t hr 
t v'vjrt  i t ed  uyro  tempi  ina  si«mals. 
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t'tuure  v.  Imp  lilt  ed  block  dtauram  v't  a st  1 apvlown  systeMir. 


l'lre  v'v't  1 espotnl  l n«t  block  dinar  am  v't  a st  r npdown  system  Is  shown  t rr  riuuro  i.  The  added 
i-orrrput  at  i v'tra  l tunctK'irs  Involve  the  i nt  ear  at  Km  v't  measured  uyro  rate's*  tv'  obtain  attitude* 
the  resolution  v't  nreasuied  aece  l er  at  K'ns  onto  the  teli'iimce  v'vH'ivlinatt'  frame,  and  avlvl  t 
t tonal  stensot  e'ttoi  compensat  K'n  which  is  tevptited  as  a re'sult  v'f  the  detitandtna  st  r apdown 
i'pe'1  at  t nvj  envi  ronme'nt  . In  ettect,  Mre'se'  avlvl  1 1 f v'tra  1 eornput at  ions  replace  the  prev'lsiv'n 
I’lrct  inmechanival  devices  associate'!!  with  the  a t mba  l struefme  anil  its  o'nt  rol  . 


A comparison  of  several  important  gimbal  and  strapdown  characteristics  is  shown  in 
Figure  4 . 


gimbal  system 


STRAPDOWN  SYSTEM 


HIGHER:  FEWER  TOTAL  PARTS 


LOWER:  MORE  TOTAL  PARTS 


RELIABILITY 


LOWER:  HIGHER  RELIABILITY 
EASIER  TO  MAINTAIN 


HIGHER:  LOWER  RELIABILITY. 
MORE  DIFFICULT  TO  MAINTAIN 


COST  OF  OWNERSHIP 


ONE  WAY  DATA  TRANSFER 


TWO  WAY  DATA  TRANSFER 


IMU/COMPUTER  INTERFACE 


HIGHER:  DIRECT  DIGITAL 
ATTITUDE  DATA  AVAILABLE 


LOWER:  CONTAMINATED  BY 
SYNCHRO  ERRORS 


ATTITUDE  ACCURACY 


DIRECTLY  AVAILABLE 


NOT  AVAILABLE 


ATTITUDE  RATE  DATA 


DIRECTLY  AVAILABLE 


NOT  AVAILABLE 


BODY  AXIS  ACCELERATION 


NO  SINGULARITIES 


SPECIAL  PROVISIONS  TO  AVOID 
"GIMBAL  LOCK" 


ATTITUDE  OPERATING  LIMITS 


Figure  4.  Characteristics  comparison  of  gimbaled  system  vs  strapdown  systems 


AN  EXPERIMENTAL  IMPLEMENTATION 


Project  description 


In  1974  MBB  received  a contract  from  the  German  Ministry  of  Defence  (GMOD) 
develop  and  flight  test  a Control  Configured  Vehicle  using  an  F-104-G  as  a 


Since  this  experimental  aircraft  offered  a good  possibility  to  implement  ohter  than 
only  the  basic  CCV-technology , it  was  decided  to  develop  a full  digital  redundant  inte 
grated  guidance  and  control  system  for  the  CCV-F104-G. 


Strapdown  sensors  have  been  selected  to  form  the  heart  of  the  CCV-sensor-system 


Figure  5.  CCV-F104-G  in  flight 


CCV-F104-G  Guidance  and  Control  System  Description 


The  CCV-F104-G  integrated  guidance  and  control  system  provides,  within  a set  of  four  re 
dundant  computers: 


Stabilization  and  Control 
Autopilot 

Air-Data  Computation 
Strapdown  Navigation 


Auto  Navigation 
Redundancy  Management 
Preflight  Checkout 


TIME  COORDINATE  (DESIRED  TIME-OF -ARRIVALS) 

TRACK  ANGLE 

AIRSPEED 


VERTICAL  FLIGHT  PATH  ANGLE 
TURN  RADIUS 
WIND  VECTOR 


( 


4.2.1  Functional  do script  ion 

Using  configuration  measures  the  airplane  will  be  destabilized  up  to  -201  mean  wing 
chord,  a fact  which  will  not  be  addressed  here.  However,  it  is  very  important,  that  the 
decision  for  the  FBW  system  to  be  quad  redundant  was  not  influenced  at  all  by  the  fact 
that  the  air  plane  is  unstable.  Only  a ( fail -op) 2 requirement  and  the  decision  for  no 
mechanical  back  up  system  lead  to  this  redundancy  degree. 


Figure  6.  CCV-F104-G  guidance  and  control  system 
(one  channel) . 


4.2.2  Subsystem  Description 

The  strapdown  subsystem  consists  of  two  basic  units,  a TDS-JD  inertial  measurement  unit 
(IMU)  and  a TDY-43  digital  computer.  A simplified  block  diagram  of  the  subsystem  is 
shown  in  Figure  8. 

The  primary  system  sensors  are  two  Teledyne  SDG-5  two -degree -of -f reedom  strapdown 
gyroscopes  and  three  Systron  Donner  Model  4841  linear  accelerometers.  Both  the  gyros 
and  accelerometers  employ  analog  rebalance  techniques.  The  torquing  currents  required 
to  rebalance  the  gyros,  which  are  directly  proportional  to  the  vehicle  angular  rates 
about  the  sensing  axes,  provide  the  basic  system  angular  motion  measurements.  Transla- 
tional motion  measurements  are  providing  as  voltages  directly  proportional  to  linear 
acceleration  along  the  accelerometer  sensing  axes. 

These  analog  sensor  outputs  are  converted  to  digital  format  using  high  accuracy  voltage- 
to-frequency  (V/F)  converters  and  buffered  for  transmission  to  the  digital  computer. 
Auxiliary  data,  including  sensor  temperatures  and  self-test  signals,  is  converted  by  a 
separate,  multiplexed,  whole-number  analog-to-digital  converter. 

Measurement  data  received  by  the  computer  is  first  compensated  for  various  error  effects 
The  compensated  angular  rate  measurements  are  used  to  compute  vehicle  attitude.  Compen- 
sated acceleration  data,  after  appropriate  coordinate  transformation,  is  used  to  compute 
navigation  data.  Angular  rate,  acceleration,  attitude  and  navigation  parameters  are  then 
used  as  the  data  base  for  implementation  of  guidance  and  control  functions. 


■Jf*  ■ t ‘5-  » - 1*? 

.•t  w* , m * 

- 

V > ' > ■ * ‘ * 

, A « < 'm  1 ' 

\ r 

■ v’.'  >• 

Mi 

'*  > ' >•  ' ' 

* §** 

/ ■ * *s  - 

, / # 

Figure  7.  Control  and  display  unit,  computer  and  inertial  measurement  unit 
of  the  CCV-F 104. 


4.4  Vertical  Path  Generator 


For  an  altitude  change  between  point  pairs  the  vertical  path  generator  uses  either 
one  flight  path  angle  (FPA)  for  the  entire  path  between  the  two  points,  when  a flight  path 
angle  has  not  been  specified,  or  two  FPAs  consisting  of  a segment  with  a specified  FPA  and 
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Figure  8.  Simplified  block  diagram  of  the  CCV-F104  strapdown  system 


4.2.2.  1 Inertial  Sensors 

The  inertial  sensor  package  includes  two  two-degree-of -freedom  gyroscopes  and  three 
linear  accelerometers  arranged  on  a single  instrument  mount.  A photograph  ot  this  package 
is  shown  in  Figure  <>.  The  accelerometers  are  mutua l ly  orthogonal  and  mounted  nominally 
along  the  primary  axes  of  the  vehicle.  The  gyros  are  mounted  in  a skewed  arrangement 
with  spin  axes  nominally  10°  from  the  vehicle  roll  axes.  This  skewing  is  provided  to  re- 
duce power  consumption  during  high  roll  rate  maneuvers. 


Figure  Sensor  mount 


The  gyroscope  which  is  employed  is  the  Teledyne  SlXl-5.  This  gyro  is  a dty  turn'd  Instrument 
specifically  designed  for  strapdown  applications.  Specified  bias  stability  tot  the  gyro  x- 
O.OIVhr,  with  random  drift  of  0.001°/hr.  Maximum  input  rates  are  specified  at  400°  sec, 
providing  a dynamic  range  in  excess  of  lO11 : l . Development  of  the  SPG  gyro  was  initiated 
in  1‘M*8  and  it  has  been  produced  since  1‘*71. 


the  aircraft  will  not  meet  the  assigned  TOA.  This  information  is  displayed  on  the 
Situation  Display  for  the  pilot,  in  case  he  wants  to  modify  the  3-D  trajectory  or  speci 
fied  speeds  to  achieve  he  TOA. 


ROTOR 


TOROUIR  COti 


ANGUt  AS  ' VII  STOP 


GIMBAl 


TOROUIR  MAGNUS 


MOTOR  STATOR 


The  accelerometer  which  is  used  is  the  Systron-Donner  Model  4841.  This  instrument  is 
characterized  by  bias  stabilities  of  50  ug . Approximately  3000  of  these  units  have  been 
produced  and  used  in  a variety  of  appl icat ions . A photograph  of  the  Model  4847  accelero 
meter  is  shown  in  Figure  1 1 . 


Figure  11.  Model  4841  accelerometer 


4. 2. 2. 2 I MU  [Electronics 


The  IMU  electronics  serve  three  primary  functions.  The  analog  electronics  provide  control 
of  the  inertial  sensors.  The  conversion  electronics  convert  the  basic  analog  measurement 
data  to  digital  format.  The  digital  electronics  provide  IMU  timing  functions,  buffer  the 
converted  data  and  interface  with  the  digital  computer. 


A simplified  block  diagram  of  the  sensors  and  analog  electronics  is  shown  in  Figure  1 


The  reference  state  and  control  law  have  been  structured  so  that  each  command  will  handle 
a single  dimension  of  the  tracking  problem,  with  proportional  plus  rate  feedback  pro- 
vided in  each  command.  The  proportional  feedback  nulls  out  the  displacement  error  and 
path  damping.  In  the  IFTC  program  where  the  control  la 


rate  feedback  provides  path  damping, 
implemented  in  a hybrid  simulator,  aircraft 


stability  is  augmented  with  roll 
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rat  e 


Fiqure  12. 


IMU  sensor  and  electronic  block  diagram 


The  gyro  spin  motor  is  driven  by  3 phase  400  Hz  excitation.  Pickoff  excitation  is  48  KHz. 
Pickoff  signals  are  demodulated,  filtered,  and  used  to  derive  the  basic  gyro  caging  sig- 
nals, which  utilize  both  cross-  and  direct-axis  pickoff  information.  The  caging  outputs 
are  power  amplified  and  used  to  torque  the  gyro  rotor  to  null.  The  torquing  current  is 
directly  proportional  to  input  angular  rate  and  provides  the  basic  gyro  measurement  infor- 
mation. 

Accelerometer  rebalance  electronics  are  integral  to  the  sensor.  The  accelerometer  output 
is  a voltage  which  is  directly  proportional  to  input  acceleration. 

Temperature  sensors  are  included  internal  to  both  the  gyros  and  accelerometers.  These  pro- 
vide data  which  is  required  for  error  compensation. 

A simplified  block  diagram  of  the  digital  and  conversion  electronics  is  shown  in  Figure  13. 


GYRO  TORQUING 
CURRENT  (4) 


ACCELEROMETER 
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DIGITAL 

DATA 


Figure  13.  Conversion  electronic  block  diagram 


(with  roll,  pitch,  and  throttle  commands),  situation  (horizontal  and  vertical)  informa- 
tion, and  system  alphanumeric  information.  The  concept  of  computer/pilot  interaction 
was  developed  to  a higher  level  during  the  fighter  demonstration  study  by  providing 
mission  oriented  mode  controls  and  expanded  man/machine  interaction  (through  digital 
processing)  for  mission  and  data  management. 
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The  gyro  torquing  current  is  used  to  develop  a voltage  across  precision  resistors.  A solid 
state  switch  is  employed  to  provide  two  ranges  of  operation,  thus  extending  the  dynamic 
range  of  the  electronics  to  that  provided  by  the  gyroscopes.  A "wash",  or  polarity  reversal, 
technique  is  incorporated  to  effectively  eliminate  contamination  of  the  data  by  bias  vol- 
tages. 

The  acceleration  conversion  channels  are  identical  to  those  used  for  gyro  conversion  except 
that  no  range  switching  is  required.  A separate  multiplexed  whole  number  analog-to-digi ta 1 
converter  is  used  to  convert  auxiliary  data  to  digital  format. 


4 . 2 . 2 . 3 Software 

A computational  block  diagram  is  shown  in  Figure  14. 


Figure  14.  Strapdown  computational  block  digramm. 


Sensor  measurements  are  first  compensated  for  error  effects.  Gyro  compensation  includes 
corrections  for  bias,  scale  factor,  misalignment,  direct  and  quadrature  mass  unbalance, 
anisoeiasticity  and  several  "dynamic"  error  sources.  Accelerometer  data  is  compensated 
for  bias,  scale  factor  and  misalignment.  Since  the  sensors  are  not  temperature  controlled, 
compensation  is  also  included  for  thermal  variations  in  certain  error  parameters. 

Compensated  angular  rate  data  is  used  to  update  the  computed  attitude.  The  attitude 
reference  is  maintained  as  a quaternion  and  is  updated  using  a 4th  order  Runge-Kutta 
algorithm  at  a 50  Hz  rate.  The  attitude  quaternion  is  used  to  compute  the  attitude  direc- 
tion cosines  from  which  vehicle  pitch,  roll,  and  heading  are  computed. 

Compensated  acceleration  data  is  resolved  through  attitude  into  local-level,  wander 
azimuth  coordinates  and  integrated  to  obtain  velocity  and  position.  The  vertical  channel 
is  damped  by  air  data-derived  altitude  information.  Earth  rate  and  craft  rate  correction 
terms  are  computed  and  applied  to  the  attitude  update  computations.  Acceleration  reso- 
lution is  performed  at  a 50  Hz  rate.  All  navigation  computations  are  performed  at  16  2/3  Hz. 

A computational  flow  diagramm  is  shown  in  Figure  15. 
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see  Figure  11.  Decision  trees  for  tin  control /di  sp  lay  part  of  t lie  computer  program 
have  been  developed  that  establish  a reasonable,  simple  and  logical  man-machine  itit. 
action  procedure.  Bv  anticipating,  in  certain  situations,  what  displav  format  the 
pilot  will  need  for  the  next  interaction  step,  computer  automation  is  being  used  t .•> 
minimize  the  number  of  detailed  instructions  (and  key  actuations')  needed  to  control 
svstem  with  this  flexibility  and  capability. 


Figure  15.  CCV  program  flow. 


Timing  and  memory  requirements  for  the  strapdown  mechanization  are  summarized  in 
Figure  16. 


FUNCTION 

MEMORY 
(16  BIT  WORDS) 

PERCENT  OF 
AVAILABLE  TIME 
(TDY  43  COMPUTER) 

EXECUTIVE  & TEST 

524 

1.43 

ERROR  COMPENSATION 

794 

13.43 

ATTITUDE  UPDATE  & ACCELERATION 

911 

16.75 

RESOLUTION 

ALIGNMENT  & CALIBRATION 

911 

N/A 

NAVIGATION 

809 

2.09 

FLIGHT  REFERENCE  PARAMETERS  AND 

524 

2.92 

AUTONAV 

ARITHMETIC  SUBROUTINES 

841 

N/A 

SUBTOTAL 

5373 

38.21% 

CONTROL  & DISPLAY  PANEL 

1983 

N/A 

TOTAL 

7356 

38  21% 

Figure  16.  Strapdown  timing  and  memory  requirements 
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4 . 2 . 2 . 4 Strapdown  System  Outputs 

The  raw  data  are  received  from  the  IMU  and  compensated.  The  subsequent  integration  uti- 
lizes a fourth-order  Runge  Kutta  algorithm  for  the  quaternion  representation  of  attitude. 

The  following  elements  of  the  Inertial  State  Vector  are  available  to  the  user  within  the 
computer,  and  most  of  them  are  also  available  for  readout  via  a CDU. 
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It  should  be  noted  that: 

(1)  Since  the  attitude  is  also  internally  available  as  quaternions  and  the  CCV-F104-G 
control  system  uses  attitude  as  feedback  (among  other  variables) , the  control  system 
engineers  confronted  with  the  old  attitude/singularity  problem  became  accustomed  to 
quaternions.  Now  they  have  converted  their  control  laws  such  that  quaternions  are 
directly  fed  into  the  control  laws. 

(2)  The  state  vector  contains  the  angle  of  attack  ((*»  ) and  sideslip  angle  {fi*). 

It  should  be  noticed,  that  ol  does  not  contain  the  gust  term  and  fb*  contains  also 
the  drift  angle  cT  . ‘ 

The  direct  use  of  for  stabilization  (feedback)  will  be  tested  in  the  CCV-F104.  No 

final  assertion  can  be  made  about  an  appropriate  filter  etc.  for  the  elimination  of  cf  in 
the  (b  signal.  Investigations  and  tests  are  under  way. 

4. 2. 2. 5 Computer 

The  computer  is  a 16  Bit  Teledyne  TDY-43.  This  machine  operates  at  a 3.36  MHz  clock  rate, 
executing  short  instructions  in  2.38  usee  and  multiply  instructions  in  5.36  usee.  Through- 
put, for  a basic  80%  ADD/20%  multiply  instruction  mix  is  approximately  335  thousand  opera- 
tions per  second  (HOPS) . 

Each  computer  utilizes  a 16  K by  16  Bit  core  memory,  and  is  plug-in  expandable  to  32  K x 
16  Bit  capability.  An  additional  2 K x 16  Bit  high  speed  semiconductor  RAM  memory  is 
provided  for  serial  DMA  accumulation  of  IMU  data  and  other  high  speed  processing  functions. 

Three  separate  bidirectional  DMA  channels  are  provided  for  communication  with  companion 
computers  in  the  quad-redundant  configuration.  DMA  operations  are  performed  on  a cycle- 
stealing basis  with  I/O  having  priority  over  the  CPU. 

Digital  I/O  capability  is  provided  for  communication  with  the  IMU  and  the  Control  and 
Display  Unit.  The  digital  I/O  section  also  provides  for  6 channels  of  16  Bit  parallel 
digital  inputs  and  6 channels  of  16  Bit  parallel  outputs. 

The  analog  I/O  section  provides  capability  for  128  channels  of  analog  input  and  8 channels 
of  analog  output.  The  extensive  analog  input  capacity  provides  for  "wrap-around"  of  the 
analog  outputs  of  all  four  computers  for  redundancy  management  purposes. 


Figure  5. 


Parameters  Calculated  by  Hori- 
zontal Path  Generator. 


Figure  6. 


Speed/Time  Computational  Flow 
Diagram. 


3.2.3  Flight  Safety  Cons iderat ions 

Any  equipment  used  in  a flight-safety  critical  position  has  to  satisfy  two  requirements. 

The  first  is  the  reliability  figure,  which  is  hard  to  get  and  harder  to  believe  in  case 
one  is  working  with  prototypes.  The  second,  which  we  are  concentrating  on,  is  the  opera- 
tional requirement.  In  case  of  the  CCV-F104  program,  double  fail-op  requirement  was  assumed. 

The  solution  is  strictly  a majority-decision  software  logic  within  the  computers,  which 
act  as  central  voters  and  monitors. 

Since  the  number  of  new  technologies  involved  already  have  been  enough,  principles  such 
as  skewing  or  self-monitoring  have  not  yet  been  incorporated. 

In  order  to  accomplish  the  failure  detection  and  isolation  for  all  data,  the  inertial 
and  non- inertial  data  have  to  be  exchanged  between  computers,  done  here  by  DMA  data 
exchange  (see  Figure  19).  This  is  a very  fast  and  sof tware-saving  method. 


SENDING  AREA  RECIEVING  AREAS 


Figure  19.  Principle  of  DMA  data  exchange. 


Because  of  the  DMA  data-exchango  feature,  each  computer  possesses  all  variables  stored  in 
its  own  memorv  and  in  the  memories  of  the  other  three  computers.  Thus  it  can  vote. 
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Figure  20 
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As  mentioned  before,  the  computers  run  identical  but  nonsynchronized  software.  This 
feature,  which  is  imposed  by  computer  hardware,  has  resulted  in  an  undesired  effect.  ^ 

In  general,  it  forces  one  to  use  higher  failure  thresholds.  In  case  of  the  strapdown 
signals  it  did  not  allow  us  to  consolidate  the  error-compensated  raw  signals  as  ini- 
tially intended.  Since  the  asynchronism  between  computers  may  be  as  big  as  60  ms  with 
a maximum  angular  acceleration  of  1000o/sJ  , rate  thresholds  of  60°/s  arising  out  of  this 
asynchronism  are  not  tolerable.  In  practice,  failure  detection,  therefore,  is  done  based 
upon  attitude  and  velocities.  The  asynchronism  problem  is  not  considered  to  be  a major 
problem;  however,  any  future  system  should  run  soft-synchronized  to  ease  the  programmors' 
work . 


5.  PROJECT  STATUS 

At  the  time  when  this  paper  was  written,  the  CCV-F104  had  completed  a first  test-phase, 
which  was  a pure  calibration  phase  for  the  aerodynamic  sensors.  A total  of  11  flights 
were  performed.  One  IMU  (part  of  the  flights  two  IMUs)  was  installed,  but  was  not 
subjected  to  detailed  tests.  However,  the  navigation  accuracy  observed  was  between  1 
and  3 nmi/h  CEP. 

At  the  time  of  writing,  phase  II  of  the  flight-tests  with  the  fully  equipped  plane  had 
just  commenced.  Twelve  flights  have  been  performed.  These  and  a few  follow-on  flights 
are  purely  dedicated  to  aircraft  open-loop  performance  evaluation  since  some  external 
modifications  may  affect  the  aircraft  aerodynamics. 

More  detailed  information  will  be  given  at  another  occasion. 


6.  DESIGN  IMPROVEMENT  CONSIDERATIONS 


6 . 1 Introduction 

The  guidance  and  control  system  of  the  CCV-F104-G  is  presenting  a milestone  with  its 
total  digital  FBW,  its  functional  integration  and  its  strapdown  system.  However,  some 
techniques  known  already  at  the  beginning  of  the  project  have  been  excluded,  because 
one  wanted  to  limit  the  risk.  Other  new  techniques  have  evolved  meanwhile  and  a number 
of  lessons  have  been  learned  already  during  the  first  flights  and  the  ground  integration. 
So  has  for  instance  skewing  technique  been  applied  only  to  aerodynamic  sensors  in  the 
CCV-F104-G  and  self  monitoring  technique  only  to  the  actuating  system. 

As  an  outlook  to  future  projects  some  of  this  aspects  shall  be  presented  in  the  following. 


6 . 2 Sensor  Configuration 

The  orientation  of  sensors  plays  a major  role  in  the  reduction  of  hardware  without 
aggrivating  the  performance  and  operational  requirements. 

Without  discussing  the  particular  requirements  a summary  of  some  of  today  aircraft  are 
listed  in  Figure  21. 


AIRCRAFT 

TYPE 

RATES 

(FLIGHT  CONTROL) 

INS.  HAS/VG 

727 

5 RG  3 ACCEL 

2 VG 

747 

8 RG  3 ACCEL 

2 INS 

(8  RG  7 ACCEL) 

(3  INS) 

7X7 

DUAL  REDUNDANT 
(PROVIDED  BY  INS) 

2 INS  (STRAPDOWN) 

YC  14 

9 RG  6 ACCEL 

1 INS  2 VG 

F-14 

7 RG  3 ACCEL 

1 INS  1 HAS 

F 15 

6 RG  4 ACCEL 

1 INS  1 HAS 

F 16 

12  RG  8 ACCEL 

1 INS  1 HAS 

Figure  21.  Inertial  sensors  in  some  of  todays  airplanes  (Reference  fl]) 


Figure  11.  Interactive  Control/Display. 
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Figure  21  may  be  use!  as  a starting  point  for  cost  effectiveness  considerations  with  the 
following  sensor  configurations. 


6.2.1  Full  Skewing 

The  subject  of  optimal  sensor  configurations  for  redundant  strapdown  systems  has  received 
considerable  attention  in  recent  years.  The  selection  of  an  optimal  configuration  depends 
upon  the  level  of  redundancy  to  be  achieved,  the  type  of  sensor  and  its  error  statistics 
among  other  considerations. 

Fai 1-Op/Fai 1 -Op  redundacy,  i.e.  the  ability  to  survive  any  two  failures,  requires  a minimum 
of  6 single-degree-of-f reedom  (SDF)  sensors  or  4 two-deqree-of-f reedom  (TDF)  sensors. 

Under  fairly  general  assumptions  concerning  error  statistics  the  orientation  of  the  sen- 
sors for  optimum  accuracy  is  symmetric.  For  SDF  sensors  this  is  equivalent  to  arranging 
the  instruments  with  sensinq  axes  normal  to  the  six  non-parallel  faces  of  a regular  dode- 
cahedron, as  shown  in  Figure  22. 


Figure  22.  Dodecahedron  orientation  of  six  SDF-sensors. 


The  symmetric  conf igura tion  for  TDF  gyros  is  equivalent  to  arranging  the  sensors  with  spin 
axes  normal  to  the  faces  of  a regular  tetrahedron  or  semi -octahedron . The  semi-octahedron 
arrangement  is  indicated  in  Figure  23  (Orientation  of  the  sensing  axes  about  the  spin  axes 
is  arbitrary  from  the  standpoint  of  accuracy,  but  does  affect  the  ability  to  detect  and 
isolate  failures.)  A photograph  of  a semi-octahedron  instrument  package  produced  by  Tele- 
dyne is  shown  in  Figure  24. 


As  the  above  table  expresses,  there  are  two  candidates  tor  tne  neart  or  me  sensor  system 
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Figure  24.  Semi-octahedron  Instrument. 


6.2.2  Semi-skewing 

An  alternative  to  the  minimal  sensor  redundancy  approaches  is  the  "brick  wall"  approach, 
which  implements  redundancy  at  the  IMU  level  rather  than  the  sensor  level . This  approach 
requires  more  sensors  but  provides  certain  offsetting  advantages,  some  of  which  are  dis- 
cussed in  a later  section  of  this  paper. 


The  principal  is  shown  in  the  following  Figure  25. 


sensor  count  for  Fa 1 l -Op/ Fa i l -Op  redundancy.  A total  of  12  sensors  is  required  11  SDK 
instruments  are  employed  (t>  qyros  and  o accelerometers)  . Using  TDK  gyros,  the  count  it 
reduced  to  10  since  only  four  qyros  are  required. 


The  potential  for  a dramatic  reduction  in  sensor  count  exists  in  a new  sensor  currently 
being  developed  by  Teledyne  for  the  U.S.  Air  Force.  This  sensor,  a derivative  of  the 
SDG-5  gyro,  is  the  Spin  Coupled  Accelerometer  Gyro  (SCAG) . The  SCAG  provides  two  axes 
of  angular  rate  (gyro)  information  as  well  as  two  axes  of  linear  acceleration  information 
in  a single  instrument  which  is  smaller  than  the  SDG-5  gyro.  This  unique  capability  per- 
mits the  implementation  of  a full  Fail-Op/Fail-Op  inertial  sensor  package  with  a total  of 
only  four  SCAG  sensors,  as  no  accelerometers  are  required. 

The  following  Figure  27  compares  different  approaches  and  lists  some  advantages  and  dis- 
advant ages . 
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Figure  27.  Full-skewed  sensors  vs  semi-skewed  sensors. 


Figure  27  is  sel f explaining , but  going  back  to  Figure  21  it  is  clear,  that  strapdown  are 
strong  contenders  for  a central  inertial  reference  system  especially  in  combat  aircrfaft 


7.  CONCLUSIONS 

Based  upon  our  experience  with  a quadrupally  redundant  strapdown  system,  and  on  the 
growth  potential  observed  here  and  on  other  occasions,  we  find  strapdown  inertial 
technology  to  be  an  excellent  innovative  technique.  Especially  in  redundant  and  inte- 
grated guidance  and  control  systems  strapdown  sensors  are  the  prime  candidates  for  new 
projects . 


Strapdown  offers  a significant  reduction  of  hardware  and  cost  and  considerably  reduces 
the  effort  in  those  applications  where  not  only  redundant  rates  and  accelerations  but 
also  redundant  altitudes  and  other  higher  information  are  needed. 
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The  multiplicity  of  inertial  and  air  data  sensors  on  advanced  Air  Force  fighters 
and  transport  aircraft  is  contributing  significantly  to  sharply  increasing  avionic  costs. 
A potential  solution  is  the  development  of  a Multi-function  Inertial  Reference  Assembly 
(MIRA)  subsystem  which  satisfies  all  on-board  inertial  and  air  data  reference  data 
requirements  for  flight  control,  navigation  and  weapon  delivery. 

This  paper  discusses  mission  and  performance  goals  established  for  MIRA  feasibility 
studies  covering  flight  control,  navigation  and  weapon/cargo  delivery  as  applied  to  the 
fighter  aircraft  (F-15)  and  a transport  aircraft.  The  relationship  between  the  key  tech- 
nical issues  of  concern  and  the  feasibility  criteria  and  the  methodology  to  perform  the 
trade-offs  which  impact  life  cycle  costs  are  described.  Functional  performance  and 
reliability  requirements  are  shown.  Computational  requirements  for  a representative 
MIRA  system  is  summarized.  Computer  programs  were  used  to  evaluate  time  histories  of 
sensor  and  system  error  propagation  and  to  assess  the  impact  on  flight  control  system 
control  laws  as  MIRA  sensors  are  installed  at  various  aircraft  installation  locations. 

The  criteria  defined  to  perform  the  preliminary  feasibility  assessment  is  discussed. 
Comparative  studies  of  life  cycle  costs  show  a saving  estimate  in  excess  of  69  million 
dollars  for  MIRA  application  to  a quantity  of  144  fighters  over  a 15  year  operational 
life.  Cost  savings  for  transport  applications  are  qualitatively  significant,  particu- 
larly for  the  operations  and  support  cost  element.  The  results  of  ring  laser  gyro  (RLG) 
and  tuned  rotor  gyro  (TRG)  studies  of  performance  and  reliability  improvements  required 
are  summarized.  The  laboratory  demonstrations  performed  by  three  subcontractors  with 
operating  redundant  equipment,  which  shows  software  capability  to  provide  fault  coverage, 
is  discussed. 

Technology  projections  indicate  that  by  1980  performance  and  producibility  will  be 
nearing  maturity  for  sensors  and  microprocessors,  and  that  software  techniques  will  be 
developed  which  provide  adequate  fault  coverage  and  redundancy  management  for  both  skewed 
and  multi-unit  sensor  system  architectures. 

The  results  to  date  have  shown  that  questions  relating  to  key  issues  have  been 
satisfactorily  answered  with  the  conclusion  that  the  MIRA  program  should  proceed  into 
further  detailed  system  configuration  studies,  which  specifically  address  commonality, 
test  and  maintenance,  standardization  trade-offs,  and  the  preparation  of  a technical 
exhibit  for  a selected  best  MIRA  candidate  configuration. 


I . INTRODUCTION 

Current  military  fighter  and  transport  aircraft  use  avionic  equipment  which  general- 
ly follows  a federated  or  a consolidated  system  architecture.  This  has  resulted  in  var- 
ious inertial  and  air  data  functions  being  replicated  and  sensors  being  tailored  and 
dedicated  to  specific  subsystem  tasks,  for  example,  navigation:  Inertial  Navigation 
System  (INS) , Attitude  and  Heading  Reference  Systems  (AHRS)  and  Air  Data  Computer;  flight 
control:  rate  gyros,  accelerometers  and  dynamic  pressure  sensors;  weapon  delivery:  lead 
computing  gyros  and  accelerometers. 

With  the  progress  being  made  with  inertial  sensors,  such  as  strapped  down  tuned 
rotor  gyros  and  ring  laser  gyros,  and  large  scale  integrated  (LSI)  circuit  micro- 
processors, the  question  has  been  posed  which  asks,  "Is  it  possible  to  configu: o a multi- 
function inertial  reference  assembly  subsystem  which  (a)  provides  functional  outputs 
adequate  for  navigation,  flight  control  and  weapon  delivery,  (b)  achieves  the  required 
mission  and  safety-of-f light  reliability,  and  (c)  results  in  significant  life  cycle  cost 
savings  when  compared  with  current  approaches?" 

In  response  to  this  question,  the  Air  Force,  under  joint  sponsorship  of  Flight 
Dynamics  Laboratory,  Avionics  Laboratory,  and  Aeronautical  Systems  Division,  created  the 
MIRA  program  to  determine  the  eventual  payoff  when  MIRA  is  applied  to  advanced  Air  Force 
fighters,  transports  and  remotely  piloted  vehicles  (RPVs)  of  the  1980-1990  time  period 
(Figure  1) . 

The  specific  objective  and  approach  is  shown  in  Figure  2.  In  order  to  implement  the 
program,  the  Air  Force  partitioned  the  MIRA  program  into  two  phases:  Phase  I,  Feasibility, 
which  was  awarded  to  McDonnell  Douglas  Corp.  (MDC) , St.  Louis,  Missouri,  in  June  1976  and 
will  end  in  September  1978,  and  Phase  II,  Verification,  which  is  currently  scheduled  to  be 
started  in  Air  Force  fiscal  year  1979  as  shown  in  Figure  3.  MIRA  application  would  take 
place  starting  in  the  mid  1980s.  MDC  has  put  together  a MIRA  team  for  Phase  I being  led 
by  McDonnell  Aircraft  (MCAIR)  in  St.  Louis  where  fighter  studies  are  also  being  concen- 
trated, together  with  Douglas  Aircraft  (DAC)  for  transport  studies  and  subcontractors 


Honeywell,  Minneapolis,  Minnesota;  Singer-Kear fott , Little  Falls,  New  Jersey;  and  Litton, 

, Woodland  Hills,  California,  for  support  studies.  Subcontractor  studies  emphasized 
/O' strapped  down  system,  ring  laser  gyro  (RLG)  and  tuned  rotor  gyro  (TRG)  implementation 

technology,  analytical  trade-off  studies  and  hardware  demonstrations.  The  activities  and 
studies  described  in  the  following  sections  of  this  paper  were  performed  as  part  of 
Task  1,  Phase  1.  Task  1 was  aimed  at  making  a preliminary  assessment  of  feasibility  of 
the  MIRA  concept  for  both  fighter  and  transport  aircraft  through  analytical  studies  per- 
forming comparative  analyses,  and  laboratory  demonstrations  with  available  hardware. 

Detailed  system  configuration  studies  and  the  selection  of  a recommended  MIRA 
system  have  been  completed  under  Task  2.  During  Task  3 the  MIRA  technical  exhibit  will 
be  written  for  use  in  the  MIRA  Phase  2 verification  activity. 

Figure  4 illustrates  conceptually  how  the  MIRA  is  envisioned  to  functionally  replace 
the  inertial  and  air  data  references  on  current  aircraft.  MIRA,  as  a subsystem  which  has 
adequate  performance  and  reliability  (including  redundancy) , feeds  the  using  subsystems 
through  the  data  bus  network,  MIL-STD-1553A. 

Key  issues  to  be  resolved  in  determining  the  feasibility  of  the  MIRA  concept  to 
effect  cost  savings  are  shown  in  Figure  5.  Some  multi-function  requirements  needing  defi- 
nition are;  sensor  accuracy  required  for  long  duration  flights  and  the  wide  dynamic  range 
for  fighter  application;  and  sensor  location  effects,  which  include  the  vibration  effects 
on  redundant  and/or  separate  sensors  when  operated  in  a flexible  airframe.  Failure 
detection  and  isolation  requirements  place  demands  on  microprocessors  to  perform  within 
real  time  in  order  to  keep  the  fault  detection  and  isolation  at  high  confidence  levels, 
the  nuisance  alarms  at  low  levels,  and  to  accomplish  the  necessary  redundancy  management 
for  system  reconfiguration.  Adequate  reliability  must  be  achievable  in  a practical  sense 
and  modularity,  which  will  permit  flexibility  of  application,  is  essential. 

The  MIRA  road  map  of  activity  is  shown  in  Figure  6.  This  paper  will  cover  the  sign 
posts  leading  up  to  crossing  over  the  bridge.  Because  it  is  believed  that  the  fighter 
aircraft  application  will  impose  the  more  demanding  requirements  of  the  MIRA,  most  of  the 
ensuing  discussion  is  addressed  to  fighter  analysis.  A MIRA  that  is  feasible  for  the 
fighter  should  be  capable  of  adaptation  to  meet  the  normal  and  unique  performance  require- 
ments of  a transport  aircraft. 

II.  SYSTEM  REQUIREMENTS 

The  latest  Air  Force  operational  fighter,  F-15A,  was  selected  as  the  principal  data 
base  source  for  comparative  fighter  studies,  supplemented  with  F-4  and  F-18  data  (Figures 
7 and  8).  A representative  aircraft  was  selected  for  comparative  transport  studies. 

Each  aircraft  has  a high  authority  fail-safe  control  augmentation  (CAS)  flight  control 
system.  Inertial  navigation  is  required  on  each  aircraft.  The  F-15  specializes  in  air 
superiority  weapon  delivery  and  has  excellent  air-to-ground  capability.  The  transport 
performs  cargo  and  troop  drop  missions. 

Missions  were  defined  for  fighters  and  transports  which  were  representative  of  com- 
bat conditions.  The  fighter  mission  lasting  about  two  hours  involving  high  dynamics,  and 
the  transport  mission  being  approximately  30  hours,  involves  numerous  mission  segments 
where  landings  are  made  and  drops  occur.  Mission  performance  goals  were  defined  to  be 
1 NM/hr  for  inertial  navigation,  8 milliradian  for  air-to-sur face  weapon  delivery,  and 
Level  1,  MIL-F-8785  flying  qualities.  Air-to-air  weapon  delivery  performance  is  classi- 
fied and  for  the  purposes  of  this  paper  has  not  been  included. 

Output  signal  requirements  were  determined  based  upon  allocations  to  functions  for 
various  current  avionic  equipments.  Figure  9 lists  some  of  the  key  parameters  which 
were  taken  from  a detailed  list  which  showed  a total  of  117  outputs. 

Ill . ANALYSIS 

Analysis  of  computational  requirements  are  summarized  in  Figure  10.  A preliminary 
analysis  of  function  commonality  showed  that  F-15  air  inlet  controller  requirements  were 
so  aircraft/engine  oriented  that  the  air  inlet  requirements  should  be  removed  from  the 
main  MIRA  modules.  It  should  be  noted  that  the  required  processing  speed  (Kops)  and 
refresh  rate  to  implement  MIRA  would  be  decreased  (approximately  by  a factor  of  four)  for 
the  transport,  but  that  memory  word  storage  requirements  would  stay  about  the  same. 

Flight  control  key  issues,  structural  modes  frequency  and  amplitude,  gain  and  phase 
margins,  fuselage  stations  for  MIRA  installation,  and  lever  arm  effects,  were  analyzed. 
Results,  illustrated  in  Figure  11,  showed  that  when  sensors  are  combined  the  best  location 
for  flight  control  is  in  a zone  around  fuselage  station  (F.S.)  425  but  that  the  sensor 
Line  Replaceable  Unit  (LRU)  could  be  located  as  far  forward  as  F.S.  225  before  the  CAS 
would  go  unstable  without  change  in  control  laws.  The  analysis  also  showed  the  method- 
ology of  how  control  laws  changes  could  be  made  to  permit  LRU  location  to  be  moved  up  to 
the  most  available  forward  location  (just  aft  of  the  radar)  and  still  provide  Level  1 
handling  qualities. 

Figure  12  reports  the  analysis  results  for  the  fighter  hardware  Mean  Time  'etween 
Failures  (MTBF)  reliability  apportionment.  The  MTBF  is  based  upon  parts  count.  For 
comparative  purposes,  the  safety-of- flight  reliability  is  taken  care  of  by  having 
mechanical  back-up  for  flight  control.  Figure  13  shows  transport  reliability  results. 


The  150  hour  MTBF  is  a minimum  requirement  and  should  not  be  interpreted  as  being  the 
actual  MTBF.  In  reality  the  actual  MTBF  should  be  significantly  higher.  The  transport 
mission  reliability  of  0.99929  is  required  for  each  of  three  different  types  of  missions 
(training,  deployment  augmentation , intratheater  support)  defined  for  reliability  purposes. 
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IV.  FEASIBILITY  CRITERIA 

All  of  the  previous  discussion  has  been  oriented  to  establishing  the  MIRA  require- 
ments and  performing  associated  analysis  in  preparation  for  being  able  to  respond  to  the 
preliminary  feasibility  assessment  criteria  which  consists  of  the  six  categories,  all 
interrelated,  shown  in  Figure  14. 

Producibil ity  data  or  RLG  and  TRG  sensors,  which  covered  fabrication,  assembly  and 
test,  and  the  methodology  a sociated  with  each  sensor  type,  was  supplied  by  each  equip- 
ment subcontractor.  Because  produc ibili ty  is  related  so  closely  with  proprietary  data, 
the  review  of  the  data  was  done  at  each  subcontractor  facility  with  only  MDC  and  govern- 
ment personnel  in  attendance.  The  conclusion  being  that  TRG  technology  is  very  much  like 
the  present  gimballed  TRG  technology  and  therefore,  represents  minimum  risk.  However, 
more  experience  is  required  with  the  RLG  technology,  because  there  are  still  size  and  per- 
formance developments  in  work.  Within  one  to  three  years  the  RLGs  should  have  proven 
producibil ity  based  upon  current  development  trends. 

The  cost  savings  potential  was  handled  on  a total  life  cycle  cost  (LCC)  basis 
(Figure  15) . MCAIR,  DAC  and  each  subcontractor  postulated  a system  and  a proposed  mech- 
anization based  upon  the  MIRA  performance  goals  and  outputs  defined  by  MDC  documents. 
Equipment  costs  were  supplied  to  MDC  which,  in  turn,  were  input  into  a LCC  model  at  MDC. 
The  MDC  LCC  model  was  a combination  of  the  RCA  PRICE  model  and  a previously  used  MCAIR 
advanced  concepts  cost  model  (ACCM) . LCC  was  broken  into  three  functional  elements: 

(1)  RDT&E  (Research  Development , Test  and  Evaluation) , (2)  Investment,  and  (3)  O&S 
(Operations  and  Support) . For  comparative  studies  Figure  16  shows  the  F-15A  avionics 
impacted  by  MIRA  which  would  be  replaced  entirely  or  partially.  The  uninstalled  weight 
of  this  equipment  is  approximately  187  pounds  (85  kgs) . The  187  pounds  (85  kgs)  includes 
28  pounds  (13  kgs)  of  equipment  which  would  not  be  replaced  by  MIRA,  e.g.,  the  Signal 
Data  Recording  Set  tape  recorder,  the  Air  Inlet  Controller  valve  drive  circuitry  and  the 
Navigation  Control  Indicator.  Therefore,  only  159  pounds  172  kgs)  of  F-15  avionics  would 
be  in  actuality  replaced  by  MIRA.  A MI RA  configuration  which  functionally  replaces  the 
159  pounds  (72  kgs)  of  F-15  equipment  is  shown  in  Figure  17.  (Figure  17  is  used  for  cost 
comparative  purposes  only,  i.e.,  its  performance  is  equivalent,  as  much  as  possible,  to 
the  performance  of  the  equipment  replaced.)  The  equipment  weight  estimates  for  Figure  17 
is  projected  to  range  from  50  to  60  pounds  (23-27  kgs) . It  should  be  noted  that  surviva- 
bility and  mission  reliability  enhancement  is  provided  by  separate  LRUs.  Each  Multi- 
function Reference  Unit  is  capable  of  autonomous  functional  operation. 

Fighter  cost  savings,  Figure  18,  are  shown  to  range  from  69  million  to  80  million 
dollars.  This  range  (a)  is  based  upon  subcontractor  data,  (b)  is  independent  of  sensor 
mechanization,  and  (c)  includes  the  impact  of  technology  improvements  projected  to  take 
place  by  1980  with  sensors  and  LSI  microprocessors . 

In  performing  the  cost  comparison  for  transports,  the  situation  is  slightly  different 
from  the  fighter  since  there  is  no  weapon  delivery/lead  computing  gyro  requirements.  The 
transport  currently  has  a dual  inertial  sensor  system  (ISS)  and  a dual  air  data  system 
(Figure  19).  By  integrating  LRUs  for  the  MIRA  configuration,  improved  mission  reliability 
results  due  to  dual  processing  capability,  and  slightly  improved  production  costs  results 
(Figure  20).  However,  due  to  potential  commonality  and  standardization  of  LRUs,  quali- 
tative significant  savings  are  expected  in  the  O&S  cost  element. 

Assessment  of  functional  requirements  satisfied  and  identification  of  performance 
improvements  required  were  made  with  the  use  of  subcontractor  data  and  MCAIR  math  model- 
ling studies  using  a computer  program  called  SIMSIN,  which  can  evaluate  strapped  down 
sensor  and  system  performance  over  arbitrary  flight  profiles  and  provides  a time  history 
of  error  propagation.  The  results  showed  that  transport  functional  position  and  velocity 
requirements  can  be  met  with  current  TRG  and  RLG  systems  but  that  product  enhancement 
improvements  for  production  are  needed  for  fighters  due  to  the  high  dynamic  environment 
(Figure  21) . Each  MIRA  subcontractor  is  at  a different  level  in  verifying  his  equipment 
capability,  which  is  proprietary,  and  therefore  the  "present  capability,"  Figure  21,  is 
not  meant  to  be  used  to  single  out  a particular  subcontractor,  but  rather  is  to  be  con- 
sidered as  an  industry-wide  combined  average.  By  the  end  of  1980  it  is  expected  that  the 
improved  sensor  performance  required  for  fighter  applications  will  be  demonstrated,  by 
several  equipment  suppliers,  to  at  least  the  brassboard  level. 

The  impact  of  reliability  on  life  cycle  costs  is  significant.  Studies  showed  that 
MIRA  needs  an  improvement  goal  of  11.3  over  current  operational  experience  (Figure  22). 

To  achieve  this  goal,  an  approach  to  reliability  improvement  in  both  design  and  manage- 
ment, is  believed  achievable  for  MIRA  (Figure  23).  This  type  of  methodology  is  currently 
being  used  on  the  F-18  and  should  start  showing  payoff  benefits  within  the  next  two  years. 

V.  LABORATORY  DEMONSTRATIONS 


In  addition  to  analytical  studies,  hardware  laboratory  demonstrations  wore  performed 
by  each  MIRA  subcontractor. 
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The  hardware  demonstrat ions  were  aimed  at  demonstrating  key  technical  issues  such 
as  software  redundancy  management,  fault  detection  and  isolation,  sensor  skewing,  cluster 
skewing,  cluster  separation,  frequency  response,  resolution,  noise  content,  quantization, 
failure  mode  effects,  and  open  and  closed  loop  operation. 

During  each  hardware  demonstration,  the  operation  was  first  demonstrated  in  a full- 
up  configuration.  Simulated  failures  (hard  over,  slow  over,  null)  were  entered  into  the 
system  by  the  operator  and  the  signal  outputs  recorded  and  compared  with  the  full-up  per- 
formance. The  impact  upon  flight  control,  navigation  and  weapon  delivery  outputs  were 
each  assessed  with  appropriate  criteria  for  fault  coverage.  Honeywell's  RLG  demonstration 
set-up  is  shown  in  Figure  24;  Singer-Kear fott  TRG  set-up  is  shown  in  Figure  25;  Litton 
TRG  set-up  is  shown  in  Figure  26.  It  should  be  noted  that  demonstration  equipments  were 
made  available  at  no  cost  to  MDC  or  the  Air  Force. 

Each  subcontractor ' s demonstration  plan,  procedure  and  criteria  was  tailored  to  be 
supplemental  to  the  analytical  tasks  performed  and  was  based  upon  available  equipment. 

Therefore,  it  was  not  required  that  the  equipment  demonstrated  be  configured  as  a 
MIRA  system,  partitioned  as  a MIRA  system,  or  even  of  flight  worthy  construction,  even 
though  some  of  it  was. 

VI . RESULTS,  CONCLUSIONS  AND  RECOMMENDATIONS 

The  results  and  conclusions  of  key  issues  discussed  in  Figure  5 are  shown  in 
Figure  27.  Overall  conclusions  for  Task  1,  shown  in  Figure  28,  range  from  MIRA  feasibil- 
ity established  to  the  need  for  a supplemental  effort  to  take  the  hardware  demonstrated 
in  the  laboratory  and  evaluate  the  software  redundancy  management  and/or  fault  detection 
and  isolation  capability  under  dynamic  moving  vehicle  conditions,  thus  providing  added 
feasibility  in  an  environment  which  provides  translation  inputs  to  the  system. 

Recommendations  coming  out  of  Task  1 studies  are  shown  in  Figure  29.  As  a follow-up 
to  the  second  recommendation,  the  Litton  system  was  tested  in  September  1977  in  the  Air 
Force  Avionics  Laboratory  mobile  evaluation  laboratory. 

The  Task  1 studies,  analysis,  results,  conclusions  and  recommendations  reported  here 
were  formulated  in  a milestone  technical  report  and  approved  by  the  Air  Force  in  September 
1977  (Reference  2) . The  MIRA  activities  currently  completed  include  refining  the  con- 
figuration candidate  studies  and  selecting  a final  MIRA  configuration.  Detailed  analysis 
has  been  made  of  the  selected  configuration.  The  final  report  currently  in  work  will 
include  the  preliminary  MIRA  technical  exhibit,  life  cycle  cost  criteria,  application  to 
advanced  aircraft,  and  supporting  rationale. 
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FIGURE  1 

MULTI  FUNCTION  INERTIAL  REFERENCE  ASSEMBLY  (MIRA) 

(An  Avionics  Subsystem  Concept  for  Application 
to  Advanced  Air  Force  Aircraft  of  the  1980  1990s) 


• REDUCE  LIFE  CYCLE  COST  OF 
INERTIAL  EQUIPMENT 

• SYSTEMS  ANALYSIS  TO  DETERMINE  BEST 
CONFIGURATION  OF  INERTIAL  AIR  DATA 
SENSORS  FOR  THE  FUNCTIONS  OF: 

• FLIGHT  CONTROL 

• WEAPON  DELIVERY 

• NAVIGATION 


FIGURE  2 

OBJECTIVE  AND  APPROACH 
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ADV  A/C  APPLICATION  STUDY 

a 

MIRA  EOUIP  DESIGN  DEV  AND  TEST 

VERIFICATION 

OPEN  AND  CLOSED  LOOP  FLIGHT  TESTS 

III 

APPLICATIONS  TO  FIGHTERS.  TRANSPORTS, 

APPLICATION 

BOMBERS.  RPV 

1976  1977  1978  1979  1980 


□ 

ni 


1981 


. !□ 


% 


»»*••  M4I  t 


FIGURE  3 

MIRA  PROGRAM  SCHEDULE  OVERVIEW 
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FIGURE  4 

MIRA  INTERFACE  CONCEPT  COMPARISON 
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FIGURE  5 
MIRA  KEY  ISSUES 
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FIGURE  6 

PHASE  1 ACTIVITY  ROAD  MAP 


FIGURE  7 
F-15A  AIRCRAFT 


SIGNAL  DATA  RECORDER 
RATE  GYROS  AND  ACCELEROMETERS 


LEAD  COMPUTING  GYRO 
RATE  GYRO  AND  ACCELEROME  TER 
ATTITUDE  ANO  HEADING  REFERENCE 
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FIGURE  8 

F 15  INERTIAL  AIR  DATA  SENSORS 


OUTPUT  PARAMETER 

RANGE 

ACCURACY 

STANDARD 

DEVIATION 

FORM 

ITERATIONS 

PER 

SECOND 

MTBF 

LATITUDE 

• 90° 

1 NM  HR 

1553 A MUX 

25 

3.000 

LONGITUDE 

• 180° 

1 NM  HR 

25 

3.000 

INERTIAL  ALTITUDE 

1.000  TO  80.000  FT 

250  FT 

25 

3,000 

NORTH  EAST  VELOCITY  12* 

4.100  FPS 

2 5 FPS  RMS 

80 

15.000 

VERTICAL  VELOCITY 

• 2.050  FPS 

2 FPS  RMS 

80 

15.000 

TRUE  HEADING 

• 180° 

6 ARC  MIN 

80 

7.500 

DRIFT  ANGLE 

•35° 

0 1°  TO  1° 

25 

9.000 

AZIMUTH  ANGLE 

• 180° 

6 ARC  MIN 

80 

107 

ELEVATION  ANGLE 

• 90° 

2 ARC  MIN 

80 

107 

ROLL  ANGLE 

• 180° 

2 ARC  MIN 

80 

107 

BODY  LINEAR  ACCELERATION  (3) 

390  FT  SEC? 

0 33  FT  SEC7 

80 

107 

BODY  YAW/PITCH  RATE  (2) 

•85°  SEC 

0 02°  SEC 

80 

107 

BODY  ROLL  RATE 

360°  SEC 

0 02°  SEC 

80 

107 

BAROMETRIC  ALTITUDE 

1.000  TO  80.000  FT 

2 FT  OR  0.2% 

25 

107 

TRUE  ANGLE  OF  ATTACK  a 

10°  TO  35° F 

0 12  ♦ 0 004  a ♦ 10 

25 

107 

INDICATED  AIRSPEED  V| 

14  fC  1 600  KTS 

4 KTS  V|  • 100 

25 

107 

1 2 KTS  Vj  100 

TRUE  AIRSPEED 

60  TO  1.710  KTS 

| 5 KTS 

25 

107 

MACH  NUMBER 

0 09  TO  3 M 

I 0 005  TO  0 01 

25 

7.500 

TOTAL  TEMPERATURE 

62°F  TO  233°F 

0 44° 

25 

9.000 

FIRST  RAMP  SERVO  DRIVE 

• 50  MA 

1 INTO  100  i: 

LOAD 

CONTINUOUS 

107 

DIFFUSER  RAMPS  SERVO  DRIVE 

• 50  MA 

1 INTO  100  i’ 

LOAD 

1 

107 

BYPASS  SERVO  DRIVE 

• 50  MA 

INTO  100  i! 

LOAD 

1 

107 

NON  MUX  BUS  DISCRETES  (10) 

ON  OFF 

N/A 

WIRES 

RANDOM 

30  000 

MUX  BUS  DISCRETES  (101 

ON  OFF 

| N/A 

1553A  MUX 

30.000 

REACTION  TIME 

10  MINUTE  (MAX)  FOR  GYRO  COMPASS  ALIGN  3 

; MINUTE  (MAX! 

1 FOR 

FIGURE  9 

KEY  OUTPUT  REQUIREMENTS 


KOPS 

WORDS 

REFRESH/SEC 

EXECUTIVE 

16 

1,000 

128 

GYRO  COMPENSATION 

41 

538 

64 

ACCEL  COMPENSATION 

10 

126 

64 

FDI/RM 

15 

312 

64 

DESIGN  EQUATIONS 

10 

700 

64 

ALIGNMENT  MATRIX 

8 

175 

64 

QUATERNION 

39 

900 

64 

VELOCITY/POSITION 

45 

1,200 

32 

ATTITUDE/RATES/ ACCEL,  ETC 

4 

500 

128 

AIR  DATA 

364 

3,500 

20 

OUTPUT 

5 

350 

A/R 

DATA  BASE 

- 

1,500 

- 

SUBROUTINES 

- 

600 

- 

BITE 

40 

600 

- 

TOTALS 

597 

12,001 

Note  Air  inlet  requn>-s  1.000  additional  words.  7 KOPS 


FIGURE  10 

COMPUTATIONAL  REQUIREMENTS  ESTIMATE 

(Representative  MIRA  System  - Fighter) 
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FIGURE  11 

FIGHTER  ENVIRONMENT 
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• ALL  FLIGHT  CONTROL  OUTPUTS  NEED  TO  BE  AT  LEAST  FAIL  SAFE 

• MISSION  EFFECTIVENESS  REQUIREMENTS  ARE  MET  USING  THE 
ABOVE  HARDWARE  MTBF  APPORTIONMENT 


FIGURE  12 

RELIABILITY  FIGHTER 
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HARDWARE  SERIES 
MTBF 
(HOURS) 


MISSION 

RELIABILITY 


• C 15A  MIRA 
RELIABILITY 

REQUIREMENTS .150  ...  0.99929 


• LOSS  OF  AIR  DATA  AND  INERTIAL  OUTPUTS  ARE  CRITICAL  TO 
FLIGHT  SAFETY  UNDER  IFR  CONDITIONS 

• THE  DEGREE  AND  CRITICALITY  OF  MIRA  FAILURE  WILL  BE 
ESTABLISHED  WHEN  DETAILED  SAFETY  AND  HAZARD  ANALYSIS 
ARE  PERFORMED  IN  TASK  II 
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FIGURE  13 

RELIABILITY  TRANSPORT 


FIGURE  14 

PRELIMINARY  FEASIBILITY  ASSESSMENT  CRITERIA 


• DETERMINE  CONVENTIONAL  AVIONICS  TO  BE  REPLACED 
OR  AFFECTED  BY  MIRA 

• SELECT  A REPRESENTATIVE  BASELINE 
MIRA  CONFIGURATION 

• SELECT  A COST  MODEL  FOR  EACH  ELEMENT  OF  COSTS 

• R&D  (DEVELOPMENT) 

• INVESTMENT  (PRODUCTION! 

• O&S  (DEPLOYMENT) 

• PERFORM  COST  PREDICTIONS  FOR  THE  CONVENTIONAL 
AND  MIRA  AVIONICS  LIFE  CYCLE  COST  AND  DETERMINE 
THE  POTENTIAL  SAVINGS 


• CONDUCT  FIGHTER  COST  STUDY  IN  PARALLEL  WITH 
TRANSPORT  COST  STUDY 


FIGURE  IS 

LIFE  CYCLE  COST  FEASIBILITY  STUDY  APPROACH 
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FIGURE  16 

F-1 5 EQUIPMENT  IMPACTED  BY  MIRA 
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FIGURE  17 

REPRESENTATIVE  SYSTEM  CONFIGURATION  FOR 
COST  COMPARATIVE  ANALYSIS  FIGHTER 


COST 

ELEMENT 

CONVENTIONAL 
<159.3  LB} 
AVIONICS 

MIRA 

50  LB  (MIN) 

60  LB  (MAX) 

R&D 

30 

17 

18.5 

INVESTMENT 

60 

29 

32.0 

08.S* 

95 

59 

65.5** 

TOTAL 

185 

105 

116.0 

MIRA  COST 
SAVINGS 


N/A 

80 

69.0 

Noted)  All  numbers  are  in  millions  of  1 Jan  1977  dollars 
12)  200  systems.  144  aircraft.  15  year  opeijtional  life 
(3)  Technology  based  on  1985  aircraft  go  ahead 

‘O&S  includes  investment  supjrort  costs  because  PRICE  investment  does  not 
include  investment  support 

* 'Approximated  from  raiio  of  investment  costs 
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FIGURE  18 

COST  COMPARISON  FIGHTER 
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Note  Dual  MIRA  is  functionally  more  reliable  than  dual  conventional  MIRA  due  to  dual  processing  of 
inertial  and  air  data  in  each  MIRA  processor 

FIGURE  19 

REPRESENTATIVE  CONFIGURATION  FOR 
COST  COMPARATIVE  ANALYSIS  TRANSPORT 
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SYSTEM 

COST 

MIRA 

CONVENTIONAL 
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FIGURE  20 

EQUIPMENT  PRODUCTION  COST  COMPARISON  TRANSPORTS 
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PRESENT 

CAPABILITY 

REQUIREMENT 

• POSITION  ACCURACY 

2 3 NM/HR 

1 NM/HR 

• VELOCITY  ACCURACY 

8 10  FPS 

2 3 FPS 

• ASSOCIATED 

FURTHER  INVESTIGATION 

REDUNDANCY 

UNDER  DYNAMIC  CONDITIONS 
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FIGURE  21 

PERFORMANCE  IMPROVEMENT  REQUIRED 


EQUIPMENT 

MTBF  (HRS) 

CURRENT 

67.0 

MIRA 

760.0 

IMPROVEMENT  GOAL  = 11.3 

FIGURE  22 

RELIABILITY  IMPROVEMENT  REQUIRED 


DESIGN 

• CONTRACTUAL  LIMITATION  OF  COMPONENT  STRESS  LEVELS 

• IMPROVED  THERMAL  DESIGN 

• IMPROVED  PART  APPLICATION 

• FEWER  COMPONENTS  - ELIMINATE  GIMBALS,  USE  OF  LSI  MICROPROCESSORS 

• RELIABILITY  DEVELOPMENT  TESTING 

• DESIGN-LIMIT  ENVIRONMENTAL  EXTREMES 

• REALISTIC  DUTY  CYCLES  TO  MATCH  MISSION  PROFILES 

• ACCUMULATE  EQUIVALENT  SERVICE  LIFE 

MANAGEMENT 

• IMPROVED  PARTICIPATION  DURING  EARLY  DESIGN  PHASE 

• INCREASED  FUNDING  FOR  EARLY  TESTING 

• EQUIPMENT  DESIGNERS  TASKED  WITH  SPECIFIC  RELIABILITY  REQUIREMENTS 

• IMPROVED  CORRELATION  OF  LABORATORY  AND  FIELD  RELIABILITY 
MEASUREMENT  GROUND  RULES 

• CONTINUOUS  AND  AGGRESSIVE  FOLLOW  UP  THROUGHOUT  LIFE  OF  PROGRAM 


FIGURE  23 

METHODS  OF  ACHIEVING  RELIABILITY  IMPROVEMENT 
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FIGURE  26 

LITTON  LABORATORY  DEMONSTRATION 

(T untnl  Rotor  Gyro  2 Skewed  Clusters) 
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EFFECTS 
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AND  ISOLATION 

DEMONSTRATED  IN  LAB  FOR  HARD 
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FIGURE  27 

KEY  ISSUES  RESULTS 


• MIRA  FEASIBILITY  HAS  BEEN  ESTABLISHED 


• MIRA  PROVIDES  SIGNIFICANT  COST  SAVINGS  AND  MERITS 
CONTINUED  DEVELOPMENT 

• MIRA  PERFORMANCE  CAPABILITY  WILL  BE  ADEOUATE  FOR 
FIGHTER  AND  TRANSPORT 

• RELIABILITY  AND  MAINTAINABILITY  REQUIREMENTS 
WILL  BE  MET 

• AIR  DATA  COMPUTATION  SHOULD  BE  PART  OF  MIRA 

• SUPPLEMENTAL  DEMONSTRATION  EFFORT  TO  EVALUATE 
MIRA  VELOCITY.  ACCURACY  AND  REDUNDANCY  UNDER 
DYNAMIC  TRANSLATION  CONDITIONS  DURING  PHASE  I 
WILL  PROVIDE  ADDED  KEY  INFORMATION 


FIGURE  28 

OVERALL  CONCLUSIONS  TASK  1 


• CONTINUE  MIRA  FEASIBILITY  STUDY  (PHASE  1)  FOR 
DEVELOPMENT  OF  FINAL  MIRA  CONFIGURATION  AND 
PREPARATION  OF  SPECIFICATION 

• INITIATE  A SUPPLEMENTAL  TEST  TO  DEMONSTRATE 
PERFORMANCE  ON  SOFTWARE  REDUNDANCY  USING 
LAB  HARDWARE  ON  A MOVING  VEHICULAR  TEST  BED 

• BEGIN  DETAIL  PLANNING  FOR  MIRA  PHASE  11  ADP 
FLIGHT  TEST 


FIGURE  29 

RECOMMENDATIONS  TASK  1 
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SUMMARY 

This  paper  presents  a software  method  for  malfunction  detection  and  alternate  mode 
capability  in  dynamic  systems  where  slowly  increasing  sensor  errors  may  occur.  The  method 
is  based  on  parallel  Kalman  filters  and  tests  on  the  filtei  outputs.  The  paper  describes 
how  this  method  will  be  implemented  in  the  integrated  navigation  system  for  the  now 
Norwegian  coastguard  vessels.  Some  preliminary  simulation  results  are  presented. 


1 INTRODUCTION 

Malfunction  detection  has  proven  to  be  an  important  feature  of  automatic  and  compli- 
cated systems.  This  paper  presents  a software  method  foi  detection  and  isolation  of 
"difficult"  malfunctions  in  dynamic  systems.  Despite  the  specific  application  at  hand, 
the  method  focused  in  this  paper  is  generally  applicable  to  sensor  data  integration  where 
gradually  senaor-deter iorat ion  may  occur. 

The  method  presented  is  neither  supported  by  practical  experience  nor  by  extensive 
simulation  results.  The  contribution  of  tins  paper  is  rather  to  suggest  a somewhat  new 
approach  to  a difficult  and  important  problem  when  trying  to  obtain  confident  estimates 
from  an  unreliable  dynamic  system. 

The  ideas  described  in  this  paper  stem  from  the  development  of  an  integrated  naviga- 
tion system  for  the  new  Norwegian  coastguard  vessels.  The  development  is  being  carried 
out  at  Kongsberg  VApenfabrikk  and  Norwegian  Defence  Research  Establishment. 

The  navigation  information  from  the  different  sensors  are  to  be  fed  into  a minicom- 
puter. The  informat  ion  is  processed  to  obtain  the  "best"  estimates  of  the  vessels  posi- 
tion, velocity,  and  orientation.  The  processing  will  be  designed  to  produce: 

reliable  estimates 
accurate 
conf ident  " 

The  expression  "reliable  estimates"  means  that  the  estimates  are  available  most  of 
the  time.  Accurate  estimates  means  that  the  estimates  are  close  to  the  true  state.  The 
expression  "confident  estimates"  denotes  estimates  possessing  a true  accuracy  close  to 
the  expected  accuracy. 

Simulations  showed  that  the  common  malfunction  detection  methods  failed  to  detect 
and  identify  gradually  increasing  large  biases  in  the  radionavigation  systems  Pecca  and 
Loran  C which  was  to  be  used.  These  errors,  caused  by  a thmo spherical  disturbances, 
drasticly  deteriorated  the  position  accuracy  of  the  integrated  navigation  system  if  they 
were  not  detected.  The  method  described  here  is  a result  of  the  investigations  which 
were  preformed. 


2 DESCRIPTION  OF  A METHOD  FOR  MALFUNCTION  DETECTION 

This  chapter  describes  and  discusses  a somewhat  new  approach  to  malfunction  detec- 
tion. The  first  part  of  the  chapter  briefly  lists  the  usual  methods  for  malfunction 
detection  in  order  to  support  the  following  presentation. 


2.1  Common  approaches  to  malfunction  detection 

Before  the  method  Is  presented,  it  may  bo  appropriate  with  a short  recap! tulat ion  of 
the  most  common  approaches  to  malfunction  detection  in  dynamic  systems  where  Kalman 
filter  technique  is  applied.  See  ref  (1).  The  usual  tests  focus  on  (see  figure  1): 

the  received  measurements 
the  measurement  residuals 
the  estimates 

If  the  redundancy  is  sufficiently  high,  one  may  perform  majority  voting  on  the  re- 
ceived measurements.  Other  sorts  of  reasonableness  checks  are  also  used.  Knowing  the 
normal  range  of  the  variables  being  estimated,  alarms  may  be  given  if  the  estimates 


* 


exceed  t he se  limits. 


Most  of  the  malfunction  detection  methods  perform  tests  on  the  me a urement  residuals 
l t he  differences  between  the  received  measurements  and  the  corresponding  expected  ones; 
the  expected  measurements  being  calculated  from  the  current  estimates).  The  statistical 
properties  of  the  measurement  residuals  are  easily  calculated  for  normal  situations,  and 
the  different  malfunction  detection  methods  try  to  detect  violations  from  the  normal 
statistics.  Some  of  the  methods  also  take  into  account  the  resulting  statistical  proper- 
ties of  the  measurement  residuals  when  spesific  malfunctions  occur;  see  ref  (2).  The 
tests  may  lx*  made  mote  efficient  by  designing  so-called  failure  sensitive  filters,  see 
ret  ( 3)  . 

Reference  i4>  describes  an  application  of  parallel  filters  for  malfunction  detection 
where  the  measurement  residuals  are  used  to  calculate  the  probabilities  of  different 
spec i f l ed  ma 1 t unct 1 ons . 


2.2  Description  of  the  method 

The  method  to  be  presented  inherits  a lot  from  known  malfunction  detection  methods. 
The  ideas  presented  in  this  paper  are  partly  inspired  by  the  method  presented  in  (5). 

The  method  may  be  summarized  as  follows  (see  figure  2): 


Apply  independent  Kalman  filters,  each  filter  taking  input  from  a subset  of 
available  sensors. 


Check  t lie  differences  between  the  sets  of  filter  estimates 
testing  based  on  the  covariance  matrices  calculated  in  the 


and  apply  hypothesis 
pa  r a 1 1 e 1 Ka 1 ma n filters. 


When  a malfunction  is  identified,  switch  to  a filter  which  excludes  the  bad 
sensor . 


The  filter  Inputs  are  generally  subsets  of  the  available  sensor  output,  but  one 
Kalman  filter  may  use  data  from  all  the  sensors.  The  system  estimates  may  either  be  a 
combination  of  estimates  from  some  of  the  filters  or  they  may  be  the  estimates  from  one 
single  filter,  preferably  t hi*  one  with  input  from  all  sensors. 


When  a malfunction  occurs,  the  sets  of  estimates  from  the  different  filters  are 
influenced  by  the  erroneous  data  in  different  ways,  and  some  sets  may  not  be  influenced 
at  all.  The  differences  between  the  sets  of  estimates  Is  accordingly  a means  to  identify 
and  isolate  the  malfunction.  In  normal  operat ion  the  sets  of  estimates  will  differ  due 
to  t tie  normal  noise  and  errors  in  t tie  system.  This  Is  the  reason  why  hypothesis  testing 
based  on  the  covariance  matrices  of  the  Kalman  filters  is  applied. 

This  parallel  t liter  approach  offers  a lot  with  respect  to  alternate  mode  capability. 
When  one  of  t tie  sensors  is  declared  mal f unct toning  and  its  data  rejected,  the  sensor  may 
have  deteriorated  the  accuracy  of  the  system  estimates  prior  to  the  ident i f ication.  Among 
the  sets  of  estimates  there  may  now  excist  one  (or  more)  that  is  not  influenced  by  the 
data  from  the  malfunctioning  sensor.  These  estimates  ought  to  be  regarded  as  the  "best" 
estimates,  and  should  be  defined  as  the  systems  estimates.  (See  figure  3). 


2.  ) Discussion  of  the  method 

This  section  will  discuss  the  following  topics  concerning  the  presented  method: 

relations  to  other  malfunction  detection  methods 
some  general  aspects  concerning  implementation 

hypothesis  testing  based  on  filter  outputs  and  covariance  matrices 

We  have  not  performed  any  detailed  investigation  to  compare  the  presented  method 
with  other  malfunction  detection  methods;  some  simulation  results  are,  however,  mentioned 
In  section  4.2.  Still  we  would  like  to  make  a few  comments  relating  to  the  methods 
presented  in  ir>)  and  i4);  both  being  fairly  similar  to  the  presented  method. 

The  method  in  (?>)  also  tests  for  malfunctions  by  monitoring  the  differences  between 
sets  ot  estimates.  The  method  presented  here  is  probably  more  generally  applicable  than 
the  method  in  ic>)  in  that  it  applies  Kalman  filters  taking  into  account  the  noise  in  the 
sensors  during  normal  operation,  rather  than  using  Luenberger  observers.  The  method 
presented  also  allows  more  freedom  in  combining  the  inputs  to  the  estimators  because 
there  is  no  requirement  that  the  basic  state  variables  has  to  be  observable  bv  the  single 
sensors.  Taking  into  account  the  calculated  covariance  matrices  in  the  alarm-  and 
identification  scheme  seems  more  theoret  icly  sound  than  the  approach  in  (M  . However, 
the  method  presented  seems  to  demand  far  more  computer  capacity  than  the  method  in  ^r'). 


The  method  dec ri bed  In  i4)  has  several  common  features  with  the  presented  method. 
Hot h methods  apply  independent  Kalman  filters,  and  both  methods  have,  at  least  in  prin- 
ciple, the  same  alternate  mode  capability.  The  basic  difference  is  that  the  method  in 


(4)  applies  the  sets  of  measurement  residuals  to  identify  occuring  malfunctions  rather 
than  monitoring  the  differences  between  the  sets  of  estimates  Theoreticly  the  method  ,,  ^ 

in  (4)  seems  to  be  optimal  in  the  Bayesian  sense.  However,  simulations  indicate  that  //  * 

the  success  of  this  method  is  strongly  tied  to  the  spesific  applications.  Reference  (6) 
questions  the  "identif iability"  of  the  method  and  mentions  the  lack  of  general  convergence 
proofs.  (A  simple  performance  statement  of  the  presented  method  is  found  later  in  this 
section.)  As  for  the  number  of  Kalman  filters  to  implement,  the  presented  method  demands 
a limited  number,  while  the  method  in  (4)  in  principle  demands  an  infinite  number.  How- 
ever, the  presented  method  also  may  have  to  reduce  the  number  of  parallel  Kalman  filters 
because  of  restricted  computer  capacity  available. 

One  interesting  qualitative  statement  about  the  presented  method  may  be  noted: 

Assume  that  a system  contains  N sensors,  and  that  the  estimates  of  the  system  vari- 
ables have  to  meet  certain  accuracy  requirements. 

If  all  N Kalman  filters  with  inputs  from  N-l  sensors  meet  the  accuracy  requirements, 
then  the  method  described  is  able  to  detect  all  sensor  malfunctions  that  will  cause 
the  system  estimates  to  violate  the  accuracy  requirements. 

This  statement  is  easily  realized.  Say  that  the  sensor  number  i is  malfunctioning. 

Since  at  least  one  set  of  estimates  is  not  influenced,-  the  difference  between  this  set 
and  the  system  estimates  will  become  too  large  to  be  accepted  from  the  corresponding 
covariance  matrices,  before  the  accuracy  requirements  are  violated. 

Several  important  questions  are  arising  when  a system  with  fault  detection  capability  as 
dec ribed  is  to  be  designed: 

How  many  parallel  filters  to  design? 

How  to  design  the  filter  models? 

What  sensor  inputs  should  be  fed  to  each  filter? 

How  to  design  the  malfunction  detection  scheme? 

The  answer  to  these  questions  are  stronly  dependent  on  the  characteristics  and  number 
of  the  sensors  available  and  on  the  computer  capacity  available.  It  could  be  desirable 
to  obtain  sets  of  estimates  based  on  single  sensors  and  to  perform  the  identification  by 
majority  voting  on  the  estimates  (5).  However,  if  estimates  may  be  obtained  this  way, 
they  are  often  too  uncertain  to  be  useful.  It  could  also  be  desirable  to  design  the 
parallel  filters  as  failure  sensitive  filters  (3).  This  approach  may  lead  to  a better 
malfunction  detection  capability,  but  the  alternate  mode  capability  will  suffer  because 
the  filter  estimates  is  not  of  minimum  variance  type. 

One  way  of  implementing  the  malfunction  detection  and  identification  scheme  may  be: 

1)  The  sets  of  estimates  from  the  parallel  Kalman  filters  are  compared  in  pairs,  and 
the  differences  are  obtained. 

2)  An  alarm  is  activated  if  at  least  one  of  the  differences  is  too  large  to  be  consis- 
tent with  the  corresponding  covariance  matrices. 

3)  The  identification  of  the  malfunction  is  based  on  the  pattern  constituted  by  the  set 
of  differences. 

The  identification  scheme  may  involve  the  use  of  decision  tables.  The  conditions 
to  test  on  can  be  determined  by  simulating  the  different  kinds  of  malfunctions  in  the 
normal  noisy  environment.  The  hypothesis  testing  in  2)  may  be  performed  in  different 
ways.  One  method  is  described  in  (7),  another  is  described  in  section  3.2. 

3 APPLICATION  IN  AN  INTEGRATED  NAVIGATION  SYSTEM 

This  chapter  describes  the  application  of  the  malfunction  detection  method  in  the 
integrated  navigation  system  for  the  new  Norwegian  coastguard  vessels.  The  integrated 
navigation  system  is  briefly  described,  and  the  specific  implementation  of  the  failure 
detection  method  is  described  and  discussed. 

3.1  Description  of  the  integrated  navigation  system 

The  integrated  navigation  system  for  the  new  Norwegian  coastguard  vessels  will 
consist  of  the  following  navigation  aids  (nav  aids) : 

NNSS  receiver  (NNSS:  US  Navy  Navigation  Satellite  System,  also  called  TRANSIT) 

Decca  receiver 


Loran  C receiver 

Inertial  Navigation  System  (INS,  accuracy  approximately  1 nautical  mile  per  hour) 


Relative  log 
Gyrocompass 


I 


iH 

The  information  from  the  nav  aids  is  fed  into  a minicomputer  through  a bus  system. 
The  minicomputer  will  process  the  information  using  Kalman  filter  technique.  A recent 
formulation  of  the  Kalman  filter  algorithm  called  UD-f actor i zat ion  will  be  applied  (8), 
(9).  The  principal  quantities  to  be  estimated  are  ships  position,  velocity,  heading, 
roll  and  pitch-angles.  In  addition  sea  currents  and  offsets  in  the  nav  aids  will  be 
estimated . 


The  NNSS  contributes  with  a high  position  accuracy  to  the  system  when  a fix  is 
obtained.  The  fixes  are  obtained  at  intervals  varying  from  about  \-2  hours.  The  Decca 
and  Loran  C systems  contribute  with  their  relative  high  signal  stability.  Bias  erros 
in  these  systems  may  be  estimated  when  the  NNSS  receiver  gets  a position  fix.  The  INS 
contributes  with  a high  short  term  stability  in  velocity  and  position  indications,  in 
addition  to  supplying  heading  roll,  and  pitch  angles.  The  relative  log  may  be  regarded 
as  a redundant  speed  sensor  when  the  INS  operates  together  with  Decca  and  Loran  C,  but 
it  contributes  with  velocity  stabilization  when  some  of  these  nav  aids  are  not  available. 
The  gyrocompass  also  feeds  the  Kalman  filter  with  inputs,  but  its  main  function  is  a 
back-up  heading  sensor. 


3.2  The  implementation  of  the  method 

This  section  describes  how  the  malfunction  detection  method  will  be  implemented  in 
the  navigation  system  at  hand.  The  interactions  with  the  operator  is  also  mentioned. 

The  implementation  will  consist  of  four  parallel  Kalman  filters  with  the  following 
characteristics: 
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The  filter  models  are  all  designed  to  produce  minimum  variance  type  estimates  from 
the  received  measurements  (i  e not  failure  sensitive  filters). 

Only  the  position  estimates  from  the  parallel  filters  will  be  compared  here.  The 
main  steps  of  the  malfunction  detection  scheme  is  described  in  section  2.3.  One  key 
question  is  whether  or  not  a pair  of  position  indications  are  too  far  apart  to  be  con- 
sistent with  the  associated  covariance  matrices.  This  question  will  be  answered  accoring 
to  the  following  scheme: 

1)  Construct  a grid  network  in  the  position  plane  containing  the  position  indications 
from  the  four  parallel  Kalman  filters. 

2)  At  each  grid  point  (representing  a certain  position)  calculate  the  probability 
density  associated  with  each  of  the  four  position  indications  and  corresponding 
covariance  matrices. 

3)  When  stepping  through  all  grid  points,  decide  for  each  of  the  six  pairs  of  positions 
indications  the  most  probable  grid  point,  and  calculate  the  confidence  of  each  of 
these  six  points. 

4)  If  one  of  the  six  confidences  are  below  a cerain  limit,  an  alarm  is  given. 

When  the  system  has  identified  a mal funct ioninq  nav  aid,  the  operator  is  warned.  The 
operator  then  has  to  decide  to  take  one  of  three  actions: 

1)  He  decides  to  exclude  the  declared  malfunctioning  nav  aid.  The  system  estimates 
will  then  be  based  on  the  filter  excluding  the  malfunctioning  nav  aid. 

2)  He  decides  to  ignore  the  warninq.  The  computations  in  the  system  will  continue  as 
if  nothing  had  happend.  The  system  estimates  are  those  from  the  Kalman  filter  with 
input  from  all  sensors. 

3)  He  decides  to  trust  the  declared  malfunctioning  nav  aid  more  than  the  other  nav  aids. 
In  this  case  he  rein! t ial izes  the  integrated  system  with  information  from  this  nav 
aid. 

It  should  be  noted  that  only  one  of  the  filters  may  physically  control  the  INS.  In 
normal  operation  this  is  done  by  the  Kalman  filter  with  input  from  all  nav  aids.  The 
misalignement  estimates  from  this  filter  is  then  used  to  torque  the  qyroes  in  order  to 
align  the  INS  platform  to  north  and  level.  The  other  filters  taking  inputs  from  the  INS, 
each  "controls"  a model  of  the  INS.  These  models  derive  misalignment  estimates  of  the 
INS  platform.  If  Decca  or  Loran  C is  declared  malfunctioning,  the  filter  without  this 


j 


nav  aid  takes  the  control.  This  filter  then  aliens  the  platform  according  tv'  Ms  own 
m i sa  l 1 gnment  estimates,  ami  thereby  remove  the  Influence  from  the  malfunction.  fj  *j 

< Discussion  or  the  imp lement at  ion 

This  sect  ion  discusses  the  following  aspects  of  the  implement  at  ion : 
the  t easv'ns  tor  the  Implementation  or  this  method 
the  reasons  for  the  choice  of  filters 

the  expected  capability  of  the  method  undei  various  conditions 
computer  requirements 

The  presented  method  will  be  implemented  in  the  navigation  system  at  hand  to  cope 
with  slowly  increasing  bias  errors  in  Decca  and  Loran  Cj  biases  due  to  atmospherical 
disturbances . The  more  common  malfunction  tests  seem  to  fail  in  the  detection  and 
ulenti  f icat  ion  of  these  kinds  of  errors  (see  section  4.2). 

One  may  ask  why  we  decided  to  use  lust  toui  Kalman  filters,  and  why  lust  these  sub- 
sets of  sensors  were  selected  as  inputs.  The  main  reason  are  listed  below: 

Restricted  computer  capacity  limited  t lie  numbct  of  parallel  Kalman  filters  to 
lust  a few. 

rhls  method  is  t.'  be  implemented  in  order  to  detect  drifts  in  Decca  and  Loran  0. 
Therefore  some  of  the  subsets  had  to  exclude  those  nav  aids. 

One  Kalman  filter  without  the  INS  had  to  be  designed  anyway  in  order  to  handle 
the  filtering  when  the  INS  is  down  because  of  the  specific  design  of  this  system. 

If  one  runs  this  filter  in  parallel  when  the  INS  is  operating,  one  may  be  able 
to  identify  failures  tn  INS  in  addition  to  support  the  identification  of  drifts 
in  Decca  and  Loran  C. 

Common  malfunction  detection  methods  (which  a 1 so  will  be  implemented)  seem  to 
be  equally  capable  of  detecting  malfunctions  in  the  rest  of  tire  nav  aids. 

We  expect  that  this  method  is  able  to  both  detect  and  identify  .ill  severe  errors  rn 
Decca  and  Loran  C , provided  that  all  four  filters  operate  and  that  only  one  error  rs 
present  at  any  trine.  We  also  expect  that  severe  errors  in  the  INS  may  be  detected  by 
this  method.  If  one  or  more  of  the  four  filters  are  not  running  due  tv'  lack  of  inputs 
from  certain  nav  aids,  the  ident i f icat ion  capability  will  drastic ly  suffer. 

The  method  presented  here  put  certain  requirements  on  the  computer  capacity.  The 
computer  memory  needed  will  increase  with  the  number  ot  parallel  filters  implemented. 

However,  the  increase  will  not  be  proportional  to  the  number  of  filters.  This  is  because 
the  same  code  to  a very  large  extent  may  be  used  by  the  different  filters  (the  filters 
will  be  executed  sequentially).  In  addition  many  of  the  quantities  in  the  different 
filters  may  use  the  same  storage  locations. 

The  increase  in  the  computation  time  required  may  in  many  cases  be  a serious  re- 
striction on  the  use  ot  parallel  filters.  In  the  application  at  hand  however,  the  dyna- 
mics of  tire  error  states  used  in  the  modelling  of  tire  system  are  low.  Therefore  a samp- 
ling time  ot  '0  seconds  may  be  used,  whereas  four  parallel  filters  requires  approximately 
•'  seconds  execution  time  r about  20  states  in  each  filter). 


4 EVALUATION  OK  THE  MALFUNCTION  DETECTION  METHOD 

This  chapter  describes  the  planned  steps  in  the  evaluation  of  the  failure  detection 
method.  Some  preliminary  simulation  results  are  also  presented. 

4.1  Steps  in  the  evaluation 

The  evaluation  of  a failure  detection  method  may  be  divided  into  three  steps: 

1)  Simplified  simulation  of  the  system  and  the  error  conditions. 

2)  Detailed  simulation  of  the  system  and  the  error  conditions. 

3>  Simulations  of  the  system  using  recorded  measurements  contaminated  by  the  error 
conditions  to  be  detected. 

Step  l involves  covariance  calculations  and  observing  the  response  on  principal 
estimates  under  different  error  conditions. 

At  step  2 a detailed  simulation  program  should  be  made  and  used  to  simulate  different 
algorithms  for  the  failure  detection  method  tv-*  be  implemented.  The  algorithms  of  the 
final  system  should  be  found  here. 
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At  step  3 it  should  be  possible  to  arrive  at  final  parameters  in  the  failure 
detection  algorithms. 


4.2  Preliminary  results 

As  stated  earlier,  extensive  simulation  results  are  not  available.  Before  the  idea 
of  the  presented  method  was  conceived,  some  of  the  known  malfunction  detection  methods 
was  investigated. 

It  turned  out  that  the  so-called  three-sigma  test  (rejection  of  too  large  measurement 
residuals)  would  fail  to  detect  slowly  increasing  bias  errors  in  Decca  and  Loran  C,  even 
when  prefiltering  was  applied  to  reduce  the  random  noise  component.  Simplified  simula- 
tions of  the  parallel  filter  approach  taken  in  (4)  did  not  produce  encouraging  results, 
and  the  method  was  dropped.  It  was  demonstrated  that  failure  sensitive  filters  increased 
the  probability  of  identifying  these  slowly  increasing  errors  by  means  of  three-sigma- 
tests  and  whiteness-tests  of  the  mea  rement  residual  sequence.  However  the  results  were 
not  satisfying  and  this  method  was  also  dropped. 

Only  preliminary  simulation  results  are  available  for  the  presented  method.  These 
are  of  the  first  type  described  in  the  previous  section.  Errors  were  introduced  into  the 
nav  aids  Decca,  Loran  C,  and  the  INS,  and  the  resulting  influence  on  the  estimates  from 
the  four  parallel  Kalman  filters  were  observed.  A normal  situation  is  shown  in  figure  4 
while  two  examples  of  malfunctions  are  shown  in  figures  5 and  6.  The  identification  scheme 
described  in  section  3.2  is  not  yet  implemented. 

Figure  5 shows  a typical  situation  when  the  position  information  from  Decca  or  Loran  C 
has  drifted.  The  filter  which  relies  most  on  the  malfunctioning  nav  aid  exhibits  the 
largest  position  errors  while  the  one  without  this  nav  aid  is  not  affected  at  all.  Be- 
cause of  the  unsymetrical  position  indications  of  the  four  filters,  the  malfunction  may 
be  identified.  In  this  example  a 400m  bias  error  in  Decca  is  softly  introduced  (the 
first  derivate  is  continuous)  during  one  hour.  This  figure  shows  the  situation  after  40 
minutes,  when  the  Decca  error  has  increased  to  approximately  300m. 

Figure  6 shows  the  situation  3 n minutes  after  an  abrupt  bias  shift  in  the  drift  of 
the  east  gyro.  The  bias  introduced  is  ten  times  larger  than  the  standard  deviation  of 
the  normal  gyro  drift.  As  expected,  the  filter  estimates  are  less  sensitive  to  malfunc- 
tions in  the  INS  than  in  Decca  and  Loran  C.  The  pattern  of  the  position  indications  is 
not  as  clear-out  here  as  i figure  5. 

A better  understanding  of  the  malfunction  detection  capability  of  this  method  will 
probably  be  gained  during  the  comming  investigations. 


5 CONCLUSION 

This  paper  has  presented  a somewhat  new  approach  to  malfunction  detection  in  dynamic 
systems.  The  method  also  offers  alternate  mode  capability.  It  will  be  implemented  in 
the  integrated  navigation  system  for  the  new  Norwegian  coastguard  vessels  in  order  to 
detect  and  identify  slowly  increasing  large  bias  errors  in  the  radionavigation  systems 
Decca  and  Loran  C.  Four  independent  Kalman  filters  will  run  in  parallel.  One  filter 
takes  input  from  all  nav  aids  while  the  three  additional  filters  ommit  one  nav  aid  each 
of  INS,  Decca,  and  Loran  C.  The  malfunction  detection  scheme  will  work  with  the  differ- 
ences between  the  position  indications  from  the  four  Kalman  filters  taking  into  account 
the  calculated  covariance  matrices. 

Preliminary  simulations  show  encouraging  results.  Also  some  kinds  of  errors  in  INS 
seem  to  be  detected.  The  method  will  soon  be  evaluated  by  a simulation  program,  simulat- 
ing the  integrated  navigation  system  in  detail. 
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1 MEASUREMENTS  FROM  SENSORS 

2 MEASUREMENT  RESIDUALS 

3 ESTIMATES 


Figure  1 


A Kalman  filter  implementation  showing  the  most  common  quantities  being 
subject  to  failure  detection  tests 


Figure  2 The  prinsiple  of  the  failure  detection  method  presented  in  this  paper 


ONE  SENSOR  MALFUNCTION 

DETERIORATES  IS  OECLAREO 


Figure  3 Illustration  of  the  alternate  mode  capability.  The  broad  line  is  defined 
as  the  best  position  estimate 
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Figure  4 Position  estimates  and 

one-sigma-ellipses  from  the 
parallel  filters  in  normal 
operation.  (The  cross  in 
figure  4,  5 and  6 represents 
true  position) 
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Figure  6 Position  estimates  and  one-sigma- 
ellipses  after  a large  bias  shift 
in  the  east  gyro  of  the  INS 


Figure  5 Position  estimates  and  one-sigma-ellipses  when  Decca  has  drifted 
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Ibis  paper  discusses  the  need  tor  low  pilot  workload  in  future  coinbat  air 
< ra  1 1 equipped  with  electronic  display*,  and  outlines  means  by  which  this 
mav  be  achieved  through  optimization  of  display  functions  and  rationalization 
of  controls.  brief  descr i pt  ions  of  I'lirvcnt  work  on  head  up  displays  and 
helmet  sighting  systems  are  included. 

The  combat  aircraft  of  the  future  will  offer  the  pilot  an  agile  airframe  with  advanced  sensors  and 
displays,  .»  combination  which  adds  up  to  a greater  combat  potential  than  that  of  current  aircraft . 

However,  many  current  aircraft  demonstrably  impose  vor*  high  work  loads  on  the  pilot  and  it  the  advantage* 
of  future  advanced  sensors  amt  displays  are  to  be  realized  it  is  essential  that  they  are  less  demanding 
on  the  pilot's  time  than  are  current  avionics  The  effectiveness  of  the  aircraft  will  depend  on  the 

pilot  machine  interface,  on  the  ease  with  which  he  can  communicate  with  the  avionics  through  the 

controls  and  the  efficiency  with  which  the  avionics  can  supply  him  with  the  data  he  needs  through  the 
displays.  Whereas  on  previous  aircraft  it  was  airframe  performance  or  weapons  capabilities  that  made  it 
a good  fighter,  future  aircraft  will  probably  have  only  slightly  better  performance  and  slightly  better 
weapons,  and  the  real  scope  for  improvement  lies  m the  increase  in  combat  effectiveness  which  can  be 
brought  about  bv  reducing  the  pilot's  workload  m terms  of  s\ steins  management  thereby  increasing  his 
ability  to  keep  his  eves  out  of  the  cockpit.  l.xperieme  and  studies  show  that  air  combat  is  essentially 
a visual,  head  up  activity  ami  the  cockpit  should  be  designed  with  this  upper  most  in  mind. 

Over  the  past  year  Marconi  Avionics  have  been  engaged  m studies  into  the  cockpit  and  avionics  design  of 

the  next  British  fighter.  Our  studies  have  shown  that  the  four  most  significant  factors  that  will 

influence  the  cockpit  design  are: 

• Kole  and  mission  flexibility,  including  compat ibi 1 i t y with  sensors  more  complex  than  those 
on  current  combat  aircraft. 

• Reduced  instrument  panel  area  together  with  restricted  reach  m the  high  'g' 
conf igurat ion. 

• i.reater  effectiveness  of  single  crew  operation  bv  close  attention  to  an  integrated 
ergonomic  design  to  simplify  operation  and  reduce  peak  workloads. 

• Systems  integrity  which  reflects  the  differing  requirements  of  mission  and  flight 
safety  with  regard  to  the  controls  and  inform.it  ion  displays.  Tor  justifiable 
confidence  in  safe  operation  the  pilot  requires  adequate  reliability,  redundancy  and 
reversionary  sources  of  flight  critical  informat  ion . 

Pie  results  of  our  studies  into  future  cockpits  have  led  us  to  depart  radically  from  convent iona l 
controls  and  displays  in  order  to  meet  these  objectives,  with  two  fundamental  design  rules. 

firstly  displays  must  m general  be  multipurpose  and  not  dedicated  as  in  current  cockpits,  though  there 
is  still  a clear  need  for  some  conventional  single  function  instruments  when  it  is  either  uneconomic  or 
undesirable  to  integrate  their  functions. 

Secondly  rationalization  of  some  of  the  controls  of  the  various  aircraft  systems  is  required  tv’  reduce 
pilot  workload  and  improve  combat  effectiveness,  for  example,  the  provision  of  a single  control  t o arm  a 
particular  weapon  and  simultaneously  select  the  appropriate  display  modes  and  weapon  aiming  program. 

Some  controls  will  be  multifunction  some  not,  according  t v>  the  mode  selected. 

these  cons iderat ions  dictate  an  integrated  approach  to  the  cockpit  design  involving  multifunction 
electronic  displays  and  rat  tonal i zed  controls. 


Role  and  Mission  flexibility 

luture  combat  aircraft  are  likely  to  need  both  air  tv’  air  and  air  to  ground  capability.  for  example  it 
is  probable  Chat  the  aircraft  will  have  to  fight  its  wav  in  to  a ground  target,  deliver  its  weapons  and 
tight  its  way  out  again. 


Although  the  display  and  control  requirements  for  these  two  roles  are  broadly  similar,  they  differ 
sufficiently  in  detail  that  for  optimum  ef feet i veness  the  displays  format  should  change  according  t o the 
situation.  Ihe  integration  with  the  display  system  of  complex  sensors,  not  all  of  which  are  required 
at  each  stage  of  flight,  also  means  that  display  surfaces  will  have  different  functions  at  different 
times.  I'lie  displays  therefore  will  be  Mul  t i - 1 tinet  ion  displays. 


An  nlvantage  of  Multi  function  over  conventional  displays  lies  in  the  ability  to  reconfigure  the  surfaces 
to  give  the  pilot  the  data  of  highest  priority  for  each  mode  of  oporat ion  and  to  display  tins  data  on  the 
most  appropriate  surface.  lor  example,  during  the  weapon  aiming  and  cruise  movies  of  flight  the  pilot 
will  be  looking  out  for  some  SO*'.,  of  the  time.  The  remaining  time  w 1 11  bv*  spent  on  an  intermittent 
internal  scan  pattern  for  essential  flight  data.  1'his  scan  pattern  should  be  facilitated  by  the 
displays  so  that  .is  much  time  as  possible  can  be  spent  looking  out.  (\*ll  displays  which  an* 

discus  .ed  later  can  reduce  the  adapt  ion  time  from  outside  to  inside  ami  effectively  increase  the  outside 
visual  scan  time . 


However,  it  is  important  tv)  strike  the  right  balance  between  the  optimum  displax  configuration  for  each 
mode  .»mJ  the  high  degree  of  commonality  between  inodes  necessarv  it  the  pilot  is  not  to  be  faced  with  t<><» 
many  different  and  confusing  display  patterns.  With  today's  instrument  panels  it  is  not  uncommon  tor  a 
pilot  to  look  at  instruments  and  totally  mistake  their  functions.  This  js  especially  true  when  dials  .tie 
of  similar  appearance  and  the  pilot  is  inexperienced  on  the  aircraft.  There  was  for  example  a spate  >t 
altimeter  misreadings  by  10,000  ft  some  years  ago  at  a time  when  new,  different  altimeter  presentations 
were  introduced.  It  is  quite  easy  to  read  and  misinterpret  an  instrument  that  is  always  in  the  same  place- 
on  the  panel.  It  is  obviously  even  easier  to  misinterpret  a display  that  can  appear  on  different  places. 
Hence  it  is  important  that  a pilot  should  not  have  to  work  out  what  display  he  is  looking  at  before  begum 
ing  tv)  read  it.  In  general,  display  formats,  e.g.  VSO  (Vertical  Situation  Oisplayl  should  st  a\  the  samr 
even  when  displayed  on  different  surfaces.  It  may  he  necessary  to  alter  the  size  of  the  display,  but  the 
aspect  rat io  and  layout  should  remain  the  same  and  be  instantly  recognisable.  To  this  end  if  is  also 
important  that  different  display  functions  e.g.  V SI » and  MSP  (Horizontal  Situation  Display)  should  be  of 
different  layout  and  distinguishable  at  a glance. 


One  further  aspect  of  Mult i - 1 line t ion  displays  concerns  their  flexibility  for  future  growth.  Sew  threats, 
for  which  new  sensors,  and  new  technology  are  developed,  can  he  accommodated  by  designing  in  room  for 
growth  .it  the  outset.  Data  highways,  for  example,  should  be  able  tv)  cope  with  at  least  100%  expansion  in 
traffic  to  cope  with  future  developments  and  additional  sensors. 


Reduced  Panel  Area 


Although  it  is  bv  no  means  certain,  it  is  quite  probable  that  future  aircraft,  to  give  extra  'g' 
protection  to  the  pilot,  will  have  him  seated  in  a much  less  upright  posture  than  at  present . In 
addition  the  need  for  maximum  external  vision  means  that  the  pilot  will  be  seated  higher  relative  to  the 
airframe  or,  put  another  wav,  more  of  his  body  will  be  visible  from  outside.  The  effect  of  these  seating 
arrangements  is  that  loss  instrument  panel  space  is  available  and  the  pilot  will  be  unable  to  reach  some 
of  the  display  area  unless  he  leans  well  forward.  Under  'g'  he  will  only  be  able  to  reach  the  forward 
edge  of  the  side  consoles  hence  it  will  be  necessarv  to  mount  some  controls  remote  from  the  display 
surfaces.  Issential  controls  needed  during  combat  will  be  mounted  on  the  stick  and  throttle.  These 
include  weapon  release  switches,  display  mode  override  to  the  air  tv)  air  dog-fight  mode  as  well  as  switches 
assoc i at ed  with  radar  ope rat  ion . 

Ily  by  wire  flight  control  systems  will  make  the  aircraft  stable  when  no  control  inputs  arc  made  and  the 
lack  of  stick  movement  with  this  system  would  allow  a control  column  shaped  for  left  as  well  as  right 
handed  flying  to  make  left  handed  flying  easier,  permitting  the  pilot  to  twist  around  further  to  the  right 
when  searching  for  aircraft  in  that  quarter  ami  also  permitting  him  tv)  use  his  right  hand  to  make  better 
use  of  controls  on  the  right  hand  console.  These  controls  could  be  operated  at  times  when  the  aircraft 
is  under  low  ' g ' loadings,  for  example  when  low  flying.  It  might  be  advantageous  to  put  the  Multi- 
function keyboard  on  the  right  console  to  take  advantage  of  the  better  dexterity  of  the  right  hand. 

Single  C.  row  Ope ra t i on 

Tomorrow's  pilot  will  have  to  undertake  tasks  for  which  today's  pilot  often  has  the  aid  of  another 
crewman.  Having  myself  flown  single  seat  fighters  for  nine  vears  and  two  seat  fighters  for  seven  in  the 
interceptor,  ground  attack  and  reconnaissance  roles,  I have  no  vloubf  that  the  single  seat  aircraft  can  do 
as  good  a job  as  the  two  seater  - by  day  and  in  good  weather.  The  night  all  weather  role  on  the  other 
hand,  when  flown  at  realistic  heights  and  speeds,  currently  needs  two  men  and  l personally  doubt  that  the 
avionics  industry  can  ever  provide  equipment  which  will  totally  replace  the  navigator.  That  is  not  to 
say  that  a single  seat  aircraft  will  be  unable  to  operate  by  night  and  in  all  weather,  indeed  quite  a 
number  already  do,  the  question  is  how  much  of  an  incursion  into  the  traditionally  two  seater  night  all- 
weather  domain  will  sophisticated  avionics  allow  the  single  seater  of  the  future  to  make.  One  thing  is 
certain,  the  pilot  will  be  essentially  the  same  animal  we  have  today  and  increased  capability  can  only 
come  about  through  a reduction  in  workload  to  allow  him  to  effectives  and  safely  perform  tasks  which  he 
can  at  present  only  perform  in  a relatively  ineffective  and  sometimes  unsafe  manner. 

One  major  area  where  a reduction  of  workload  can  be  effected  is  by  the  integration  of  functions.  Over 
recent  years  an  increase  in  weapon  release  options  to  take  account  of  an  increased  weapon  inventory  and 
more  modes  of  release  has  resulted  in  complex  switching  procedures  for  the  pilot  and  for  example,  to 
release  a bomb  from  the  Phantom  l;-4,  it  is  usually  necessar>  to  make  P switch  selections  before  pressing 
the  pickle  button.  For  some  automatic  release  modes  a further  ' selections  are  necessary.  To  get  back 

to  the  air  to  air  guns  mode  2 switch  position  changes  are  needed,  to  fire  a missile,  2 more.  These 
switches  require  both  right  and  left  hand  operation  and  in  most  cases  the  pilot  has  to  lean  forward  and 
look  in,  clearly  an  undesirable  situation  in  combat  and  under  'g'.  For  future  aircraft  the  use  of 
pre-programmed  weapon  packages  can  reduce  the  number  of  selections  to  one  for  each  mode.  Composite  air 
to  air  guns  and  missile  symbology  on  the  head-up  display  (HUH)  can  allow  the  pilot  to  fire  either  guns 
or  missiles  as  appropriate  to  his  situation  in  combat  without  need  for  mode  changes.  Helmet  sighting 
systems  (HSS)  can  allow  missile  lock  on  and  firing  without  the  need  to  track  the  target  with  the  aircraft. 
Integration  of  functions  can  markedly  reduce  the  pilots  workload  and  the  flexibility  of  digital  systems 
permits  changes  to  these  functions  to  keep  match  with  future  developments  in  weapons,  tactics  and 
avionics. 


The  guiding  principle  for  display  configuration  is  that  because  the  pilot  will  operate  for  much  of  the 
time  in  visual  conditions  and  in  a confused  and  probably  hostile  airspace  he  must  be  able  to  keep  hi* 
eyes  outside  the  cockpit  as  much  as  possible.  I briefly  mentioned  collimated  displays  earlier.  Apart 
from  the  HUH  and  IISS  which  are  collimated  and  to  some  extent  complementary  in  that  the  HSS  can  displax 
data  such  as  energy  and  threat  direction  when  the  pilot  is  looking  outside  the  field  of  view  of  the  HUP, 
a further  development  lies  in  the  use  of  collimated  displays  within  the  cockpit.  We  have*  under 
development,  a display  sys tern  where  a continuous  display  is  achieved  I"  merging  the  HUP  with  the  next 
display  surface  below  it  - sometimes  known  as  the  Head  level  Pisplax  (111  PA  to  distinguish  it  from  Head 


\ 


iMwn  Pisplav  l HOP).  Ihe  III. I'  i •.  also  co  1 1 l mat  ed  .uul , as  I ment  ioned , tin-  optical  arrangement  s ,r<  siuli  .< 
to  give  a » out  unions  display  with  an  tnst  ant  aneou-.  field  >*t  v low  of  *.m»e  lior  i out  a I 1 \ by  In'  vert  iv  all 

Below  tills  t fu*  re  is  still  room  to  tit  a further  displav  s«r  i.i.c,  the  lll>l>.  I ijjurr  I *du»w  • t hr  general 

arrangement . 

\ tut n t*i*  combat  aircraft  might  have  up  to  displav  urt.ues  in  all,  v hi  the  centre  and  ' more  on  each 
side.  I'he  V centre  displays  (IIPP,  ill  l1,  HPP)  would  hr  used  to  carr\  the  top  priority  data  for  the  mode 
selected.  In  the  air  to  air  and  air  to  ground  modes  this  would  he  primarilv  data  associated  with  target 
acquisition  and  weapon  aiming,  in  the  cruise,  take  oft  landing  and  emergeticv  modes  it  would  hi-  data  with 
flight  path  control. 

fhe  l side  displays  would  he  for  data  of  secondary  importance,  this  i .,  data  which  the  pilot  needs  to  have 
available  at  short  notice  tor  reference  purposes  hut  which  is  not  vital  tor  the  immediaf*  task  m hand. 

lo  some  extent  displav  functions  would  move  from  surface  to  surface  as  modes  change.  1 ach  surface  could 
have  function  indicator  hut  tons  which  are  labelled  to  show  the  displav  fund  ion  entered  aut ornut i v a 1 1 \ on 
mode  change  (e.g.  VSP,  PRll.l.S,  K Al  * \K ) and  pressed  ti>  engage  optional  tunc  t ions. 

In  some  cases  automatic  reversion  would  occur  following  the  failure  of  another  displ.n  surface.  lor 
example,  if  the  HUP  tails,  its  displav  eould  he  "dropped"  to  the  HIP  ami  displaced  on  the  view  of  the 
outside  world  normally  seen  through  the  HUP  hut  which  is  now  shown  on  the  HIP  In  means  oi  the  HUP  v ulecon 
recorder  camera  or  V AS  (Visual  Augmentation  System).  Because  the  HIP  is  collimated,  the  pilot  should  he 
able  to  cans  out  weapon  aiming  with  initial  target  alignment  using  the  HUP  standby  sight  and  final  weapon 
aiming  through  the  II1P  using  the  same  symhologv  as  that  normally  displayed  on  the  HUP,  hut  now  di  plaved 
vn  the  lll.P,  against  the  displayed  image  of  the  target.  With  a 1:1  displav  real  world  relationship,  the 
pilots  actions  in  weapon  aiming  through  the  HIP  will  he  essential  Iv  the  same  as  weapon  aiming  through  the 
HUP  and  the  fact  that  the  eves  are  focus s»sl  at  infmitv  means  that  the  peripheral  cues  ot  the  real  world 
used  in  spatial  orientation  during  t light  are  fill  present  and  usable.  Simulator  experience  suggest 
that  the  peripheral  cues  are  adequate  to  allow  flight  at  low  altitude  to  continue  safely.  Normal lv  it  i 
neeessarv  to  increase  altitude  slightly  when  looking  m at  instruments  during  very  low  level  flight,  becau 
when  tlie  eves  are  focussed  on  the  instruments  very  little  is  seen  v>f  the  outside  world.  However  with  a 
collimated  displav  which  is  adjacent  to  the  HUP,  verv  little  of  the  out  Mile  world  cues  are  lost  and  it 
should  he  unnecessarv  to  gain  altitude  when  using  this  displav. 

In  the  air  to  air  and  air  to  ground  modes  the  HIP  could  displav  a collimated  Visual  Augment at  ion  System 
(VAS)  picture.  I'll  is  could  he  either  1:1  image:  real  world  or  magnified  hv  , perhaps,  .i  factor  of  10. 

In  the  I I case  the  fact  that  the  HUP  and  lll.P  displays  are  both  collimated  and  give  a contiguous  displav 
means  that  a VAS  aligned  with  the  lll.P  would  give  the  pilot  a displav  which  in  effect  "sees  through"  t he 
nose  of  the  aircraft.  1'his  would  allow  him  tv*  engage  targets  which  otherwise  would  he  hidden  !*v  the 
nose.  1 samples  are:  a high  deflection  air  to  air  guns  situation  or  an  air  tv*  ground  attack  using  verv 
high  drag  munitions.  In  both  cases  the  pilot  would  have  both  target  and  aiming  symhologv  displaced  on 
tin*  HIP  as  ,i  continuation  of  the  IIHP  symbology.  i.iven  the  high  turning  rates  envisaged  for  future  combat 
aircraft  it  is  likely  that  deflect  ion  angles  greater  than  l :»  , a typical  over  nose  view,  will  frequent lv 
occur  in  air  to  air  combat.  A system  as  described  w i 1 l allow  the  pilot  to  pull  lead  and  fire  under 
conditions  where  the  limits  of  over  the  nose  view  would  normal lv  force  him  tv*  delay  his  firing  until  he 
hud  worked  off  some  of  the  angle  off. 

firing  opportun  i t ies  are  fleeting  in  combat  and  the  ability  tv*  fire  with  day  lead  angle  will  not  on  lx 

increase  the  number  of  opportunities  tv*  lire  but  also  allow  the  pilot  to  fire  on  occasions  when  the 
hostile  pilot  will  probable  not  consider  it  possible.  lor  combat  manoeuvring,  the  increased  over  the 

nose  field  of  view  will  allow  lead  pursuit  tactics  tv*  be  imp  loved  as  opposed  tv'  lag  pursuit  tactics  with 

a consequent  decrease  in  time  to  firing. 

In  the  magnified  case,  a IIIIP  symbol  would  show  the  field  of  view  of  the  V As  which  would  now  he  aligned 
with  the  HUP  or  missile  boresight  rather  than  with  the  lll.P  horesight  as  in  the  1:1  case.  tracking  a 
target  with  the  (IPP  symbol  would  province  a magnified  image  of  the  target  on  the  HIP  tor  target  recogn  1 f ion 
purposes.  The  A AS  could  thus  be  a simple  two  position,  two  field  of  view  device  with  a 1 I unmagnified 
view  of  the  lll.P  horesight  area  and  a,  say,  IP:  l magnified  view  of  the  HPP  boresight  area.  Hu*  degree 
v*  t inagn  i f i cat  ion  would  depend  on  such  factors  as  resolution,  screen  Me,  fields  of  view  and  tlu*  ease 
with  which  a pilot  can  track  a target  with  tlu*  IIPP  and  still  be  able  to  glance  into  th<*  HIP  for  long 
enough  to  recognise  what  he  sees.  At  tlu*  sort  of  range  where  unaided  air  target  recognition  is  impossibl 
crossing  rates  tend  to  be  low  ami  this  plus  the  fact  that  both  displavs  are  col  1 muted  slum  Id  ea-e  tlu* 
pilots  tracking  task. 

In  tlu*  non-weapon  aiming  movies,  the  lll.P  would  normally  act  as  the  Vertical  Situation  Pisplav  (VSP) 
allowing  reference  to  essential  flight  data  without  the  need  for  re  focussing  of  the  eves.  Ihe  ASP  can 
be  a more  comprehensive  displav  than  is  desirable  for  clutter  reasons  on  a HPP;  it  can  be  a displav 

optimised  for  instrument  flight  and  could  for  example  include  engine  power  settings  (a  parameter 

essential lv  related  to  vertical  situation  and  considered  tv*  be  of  flight  critical  status). 

As  part  of  the  aim  tv*  give  the  pilot  easily  monitorable  attitude  information,  the  IIPP  and  VSp  attitude 
displays  would  come  front  different  sources.  Any  difference  would  be  resolved  bv  tlu*  react  ion  tv*  pilot 
control  inputs  or  bv  a cross  check  maioritv  vote  with  a third  independent  revers lonarv  attitude  displav. 

Ihe  VSP  would  he  displayed  on  an  adjacent  surface  tv*  tlu*  lll.P  during  weapon  aimin*  modes.  Ihe  VSp  format 
would  remain  unchanged  despite  tlu*  change  in  location  so  that  the  pilot  does  not  have  a contend  with  a 
different  scan  pattern  on  tlu*  displav  even  it  the  inter  displav  scan  has  altered. 

ISP  Ihe  MSP  is  of  a lower  order  of  importance  than  the  VSP  hence  it  can  he  displaved  on  a lower  prioritx 
surface.  (his  display  would  give  navigation  data  as  called  up  on  the  navigation  kevboard  and  could  also 
*e  the  displav  for  that  keyboard,  that  is,  it  would  show  data  entry  a-  it  occurred.  In  addition  tv*  pure 


navigation  data,  way  points,  time  to  go  etc.,  fuel  quantity,  t low  rate  aiut  tequt  rement  s tor  tin  rout*, 
being  essentially  hori:ontal  data  associated  with  distance  and  time,  could  he  displaced  on  the  HSH. 

Preset  Bingo  fuel  states  and  steering  data  could,  to  aid  the  pilot's  scan,  he  displayed  on  t lie  HUP  as  v,el! 
as  the  MSI*. 

HPP  I'he  HPP  would  displav  iadar  m the  air  to  air  inside  and  map  m all  other  modes.  However,  to  cater 

tor  processor  waveform  generator  failures,  it  could  also  display  other  functions  when  required. 

PRlll.S  \ major  advantage  ot  electronic  displavs  lies  in  the  ability  to  displav  t.ihulated  drills  as  a 
routine  or  in  emergency  therein  obviating  tin*  requirement  to  thumb  through  I light  Reference  lards.  Ibis 
aspect  is  later  elaborated  under  the  discussion  of  the  I me r gene v mode . 

SJSIIMS  In  all  modes  one  surface  would  displav  systems  data.  1'his  includes  armament  state  in  the  air 

to  air  and  air  to  ground  modes  and  control  position  vl.it a in  the  take  oft  land  mode.  System  malfunction 
serviceability  data  would  be  automat i ca 1 1 > displayed  m the  emergenev  mode.  l‘he  various  sub  systems,  for 
example  all  services  operated  In  or  in  conjunction  with  engine  bleed  air  could  be  vailed  up  on  the  kevboar 
and  their  serv iceabi 1 i t v listed. 

I l‘M  ISM  I'ue  to  the  importance  of  electronic  counter  and  support  measures,  a dispiav  surface  could  be 

vied  i cat  evl  to  I i*M  ISM  and,  possiblv,  common  i cat  i ons  management  . 

I merge  no  Mode 

\ criticism  often  levelled  at  electronic  displays  is  that  it  is  impossible  to  displav  as  main  aircraft 
systems  parameters  as  are  current l\  shown  on  conventional  instruments.  In  general,  this  criticism  is 
valid  during  the  operational  movies,  but  it  an  aircraft  emergenev  occurs  (other  than  loss  of  display!)  and 
this  emergenev  precludes  continuing  with  the  mission,  then  the  flexibility  of  electronic  displavs  allows 
a reconf igurat ion  to  give  displays  optimised  to  help  the  pilot  cope  with  the  emergenev.  For  example,  it 
the  aircraft  was  m the  air  to  air  mode  and  an  emergenev  occurred,  a warning  could  occur  on  the  IIUP  and 
\S1»  and  the  nature  of  the  emergenev  would  appear  on  t lie  Systems  displav.  Selecting  Imergencv  mode  would 
tree  some  displays  ot  mission  dedicated  data  and  these  surfaces  could  then  give  text  giving  l mined i a t e amt 
subsequent  act  ions  together  with  the  further  rami f icat ions  of  the  emergenev  and  the  impact  of  the  failures 
on  other  systems.  Having  more  than  vine  surface  for  drills  would  allow  the  pilot  to  cope  with  more  than 
one  failure  when  the  initial  failure  may  cause  others.  For  example,  in  some  aircraft  a hydraulic  failure 
can  affect  a number  of  other  aircraft  systems  and  lead  to  emergency  situations  more  complex  than  those 
normally  associated  with  a simple  loss  of  hydraulic  pressure.  While  it  is  hoped  that  future  aircraft 

will  not  have  this  tvpe  of  cascade  failure,  it  remains  a possibility.  Hie  flexibility  of  the  display 

surfaces  tv'  reconfigure  in  a manner  optimised  to  cope  with  an  emergency  should  help  overcome  the 
lust  it  table  reluctance  of  pilots  to  have  important  parameters  not  continuously  displayed  during  normal 
operat i ons . 

Integr 1 1 > 

lo  gain  accept ab i 1 i t v , not  least  by  the  pilots  who  will  flv  them,  it  is  necessary  to  design  electronic 
display  systems  t o a very  high  level  of  integrity.  I lectronic  systems  do  fail  from  time  to  time  ami  it 
Is  essential  to  build  in  safeguards  so  that  these  failures  do  not  leave  the  pilot  with  a lot  of  blank 
screens.  One  method  employed  is  to  keep  flight  critical  data  separate  from  mission  critical  data  since 
the  consequences  of  the  former  failure  are  more  catastrophic  than  that  of  the  latter.  \t  the  same  time, 
it  is  important  to  have  redundancy  in  the  mission  dedicated  parts  of  the  system  so  that  mission 
ef feet i veness  is  not  lost  in  the  event  of  simple  failures.  I'he  various  methods  of  ensuring  integrity 
range  from  simple  tv'  extremely  complex  and  are  outside  the  scope  of  this  paper. 

lo  cater  for  major  failures  caused,  for  example,  by  engine  flame-out  when  it  is  unlikely  that  sufficient 
electrical  power  will  remain  to  drive  the  complete  display  suite,  it  will  be  necessary  to  provide  some 
form  of  stand  by,  "get  vou  home",  instruments.  These  will  help  overall  integrity  of  flight  critical 
displays  because  they  can  be  kept  separate  from  the  main  displays.  They  could  use  the  flight  control 
svstein  computers  as  data  sources  since  the  flight  control  system  integrity  must  of  necessity  be  higher 
than  all  other  systems. 

\n  additional  cons iderat ion  is  that  I'RTs  normally  require  JO- JO  seconds  from  switch-on  to  giving  a 
readable  display.  With  the  accent  on  dispersion  of  aircraft  on  the  ground  during  hostilities,  it  is 
likely  that  future  aircraft  will  require  a ground  start  facility  using  internal  IK’  power.  I yen  if 
invertors  can  supply  power  to  a limited  number  of  display  surfaces,  the  fact  remains  that  the  pilot  will 
have  to  wait  JO- JO  seconds  before  having  a displav  good  enough  to  use  during  the  engine  start  procedure 
when  he  must  closely  monitor  revs  and  temperatures.  Some  form  of  reversionary,  non  CRT  display  will 
thus  be  necessary  tv*  cope  with  the  situation  since  the  pilot  should  not  have  to  wait  for  this  period 
before  starting  after  the  receipt  of  a scramble  order. 

Whether  these  reversionary  instruments  are  conventional  or  low  power  electronic  will  depend  on  the 
progress  made  with  low  power  solid  state  displays  which  at  present  are  at  an  early  stage  of  development. 

Cont rol s 

I'he  prime  requirement  regarding  controls  must  be  tv*  make  the  pilots  task  as  simple  as  possible  given  the 
fact  that  he  may  have  tv'  operate  a complex  system  while  fighting  for  his  life.  What  may , in  isolation, 
seem  an  easily  controllable  system  may  be  virtually  impossible  to  operate  under  stress  when  the  pilot 
has  additional  s imu 1 t aneous  tasks  and  dare  not  take  his  eves  off  hi*  adversary  to  look  in  at  controls. 

Where  possible  one  switch  should  carry  out  main  switching  actions,  such  as  the  actions  needed  tv'  give  the 
correct  attack  display  and  weapon  aiming  solution  when  the  weapon  package  is  selected.  Where  possible 
switches  should  be  easy  tv'  operate  without  the  necessity  to  look  at  them.  If  a bank  of  switches  should 
always  be  on  in  flight  they  should  be  electrically  or  mechanically  ganged  so  that  they  can  be  put  on  with 


one  action,  but  may  still  be  selectively  turned  off  following  a malfunction.  Hie  switches  should  be 
- fa  grouped  such  that  those  that  need  to  be  operated  in  combat  should  be  close  to  hand  while  those  that  do  not 
can  be  grouped  in  less  accessible  areas  but  still  in  logical  and  subsystem  grouping.  This  contrasts  with 
current  cockpits  where  all  of  the  switches  associated  with  a particular  total  system  tend  to  be  grouped 
together  by  systems  rather  than  by  functions,  apparently  without  regard  to  whether  or  not  they  are 
frequently  operated  in  flight. 

Some  data  lends  itself  to  insertion  by  multifunction  keyboard.  Examples  are  navigation  co-ordinates, 
weapon  packages.  Some  data  is  best  entered  by  discrete  buttons.  Examples  are  flight  modes,  display 
surface  functions  when  different  from  those  automatically  entered.  Some  data  has  to  be  entered  under 
very  difficult  conditions.  Examples  are  radio  frequency  changes  when  flying  in  close  formation  in 
cloud,  mode  changes  under  high  g conditions.  For  radio  frequency  changes,  an  electronic  display  of  the 
actual  frequency  selected  combined  with  discrete  rotary  knobs  for  each  digit  of  the  frequency  is  probably 
the  best  compromise.  As  the  most  likely  mode  change  under  g is  to  air  to  air  from  any  other,  there 
should  be  an  air  to  air  override  button  on  the  stick. 


Where  multifunction  keyboards  are  concerned,  single  pass  data  entry  is  desirable.  It  should  he  possible 
to  interrupt  program  changes  necessary  in  flight,  such  as  insertion  of  new  navigation  co-ordinates,  in 
order  to  use  the  keyboard  to  change  the  display  of  navigation  data,  and  then  resume  the  program  change  at 
the  point  of  interruption. 

Tlie  emphasis  must  be  on  fitting  the  system  to  the  pilot  rather  than  vice  versa.  lor  example,  from  the 
systems  point  of  view  it  may  be  more  convenient  to  address  many  sub  systems  from  one  multi  function 
keyboard,  but  this  will  invariably  result  in  greater  complexity  from  the  pilot  cognitive  information 
processing  standpoint  than  addressing  the  sub  system  from  a dedicated  control. 

The  controls,  therefore  should  be  a mix  of  multi-funct ion  and  dedicated  with  the  proportions  of  the  mix 
decided  after  comprehensive  functional  allocation  analysis  of  the  pilot  task  on  simulated  missions 
including  such  factors  as,  for  example,  frequency  of  use,  likelihood  of  simultaneous  tasks  and  reach 
distance/time  considerations.  One  method  which  allows  switch  locations  to  be  readily  changed  is  to 
incorporate  them  in  groups  as  LRUs.  These  LRlIs  would  communicate  with  the  systems  they  control  through 
the  mission  data  bus.  Ideally  the  results  of  the  simulator  analysis  should  he  reassessed  on  prototype 
flight  tests  and  it  should  be  possible  to  alter  control  layout  then  or  when  squadron  experience  or  a 
change  of  squadron  role  shows  this  to  be  desirable. 

A further  consideration  is  that  the  aircraft  may  have  to  be  airborne  in  a very  short  time  initiation  of  a 
scramble  order.  Over  recent  years,  the  inclusion  of  inertial  systems  has  increased  the  time  it  takes  to 
get  aircraft  off  the  ground.  Compared  with,  for  example,  the  Hunter  or  Lightning  which  could  be  airborne 
in  1 - 2 minutes,  modern  inertial  equipped  aircraft  need  at  least  5 minutes.  If  the  pilot  of  the  future 
aircraft  has  to  store  mission  data  and  switch  on  systems  through  a mul t i - function  keyboard  as  well  as 
aligning  an  inertial  system  his  reaction  time  ma>  well  exceed  5 minutes.  Swift  reaction  from  ground 
alert  is  needed  to  meet  a low  level  air  threat  v a .all  for  support  from  the  army,  and  the  extra  t ime  may 
make  all  the  difference  between  mission  success  or  failure.  To  take  one  system,  communications,  it  is 
obviously  quicker  to  have  frequencies  manually  preset  before  the  mission  than  to  have  to  insert  them  into 
memory  before  take-off.  Similarly  once  airborne  it  is  quicker  to  change  channels  using  one  knob  than  to 
address  communications,  insert  the  channel  and  enter  the  data  through  a multi  function  keyboard. 

To  summarize,  the  choice  of  control  for  a system  should  be  made  following  analysis  of  the  task  with  the 
requirement  of  low  pilot  workload  uppermost  in  mind.  This  workload  can  occur  before  flight  when  in  a 
scramble  situation  and  in  flight  when  in  combat  and  the  control  system  design  should  therefore  be  centred 
round  the  pilot. 

Display  Types 

MUD.  The  current  generation  of  Head-up  Displays  have  two  major  limitations. 

The  Instantaneous  Field  of  View  (IFOVj , that  is  the  amount  of  the  total  FOV 

that  the  pilot  can  see  from  a given  eye  position,  is  limited. 

The  amount  of  prime  instrument  panel  space,  that  is,  space  directly  in  front 

of  the  pilot,  taken  up  by  the  HUD  is  too  large. 

To  overcome  these  two  limitations  the  multicombiner  HUD  was  developed.  This  proprietary  system  utilises 
four  reflective  combiner  surfaces  set  in  a glass  block  to  build  up  the  vertical  angle  of  the  I FOV  and 
increases  the  horizontal  angle  of  the  I FOV  by  a unique  optical  arrangement  shown  on  Figure  2 which 
allows  the  reflectors  to  be  mounted  closer  to  the  pilots  eye.  In  addition,  the  optical  arrangement  In- 
dispensing  with  a folding  mirror  and  refracting  the  CRT  image  into  the  combiner  block  results  in  a display 
unit  of  very  little  vertical  extent,  and  considerable  consequent  saving  of  instrument  panel  space. 

The  rays  of  light  from  the  CRT  pass  through  a truncated  but  otherwise  conventional  HUP  lens  system  to  the 
base  of  the  combiner  block  where  they  are  refracted  upwards  and  then  reflected  to  the  pilots  eye.  By 
employing  coatings  of  different  reflectance,  25",  33",  50"  and  100",  for  the  four  reflector  surfaces,  a 
display  of  even  brightness  is  seen  by  the  pilot.  Each  surface  reflects  a quarter  of  the  I FOV  and  these 
four  portholes  are  contiguous  with  r.o  overlap  or  underlap  hence  the  pilot  sees  a eont:nuous  display  of 
approximately  double  the  vertical  EOV  given  by  a single  combiner  HUP.  The  outside  world  picture  is  also 
of  even  brightness  being  built-up  from  multiple  reflections  but  in  a somewhat  different  manner.  Because 
the  combiner  block  is  a prism  the  lowest  jay  of  light  from  the  outside  world  to  the  pilots  eye  is 
refracted  downwards,  as  shown  hv  the  -12J  apparent  vision  line  on  Figure  3,  on  entering  the  block 
and  exits  on  the  line  marked  X so  that  the  display  unit  metalwork,  to  the  pilot,  has  an  apparent  vertical 
dimension  of  X-Y,  the  portion  above  X being  invisible.  This  allows  the  display  unit  to  he  mounted  higher 
than  otherwise  possible  without  obscuring  the  over  nose  view.  The  unit  can  also  be  mounted  closer  to  the 
pilot  without  impacting  the  ejection  line  resulting  in  increased  horizontal  FOV. 


The  mult  i comb  met  display  unit  xhuh  w i l 1 be  t hr  miImc.  t ot  twy*  separate  flight  ev  alu.it  ions  in  1‘* 'S  is 
cons  i do red  to  be  the  mx’st  cost  effective  approach  t»»  the  largo  fields  ot  view  needed  tor  future  aircraft 


») 


Mil*.  fhe  space  thrown  up  below  the  Mill''  van  be*  fillet)  bx  .1  Head  level  Pisplax  This  .an  be  viewed 
through  a contouring  lens  si  stem  which,  in  addition  t o the  advantage**  outlined  earlier  of  being  m focus 
with  the  HUP  and  outside  world.  also,  because  it  is  subtext  to  binocular  vision  give-.  increased  avimuth 
\0\.  I urthermore , it  is  possible  t o build  an  e\U  opt u system  such  that  the  vertical  1 0\  is  also 
increasetl  and  matle  cont  1 giunis  with  that  ot  the  HIM1  live  operat  tonal  advantages  ,»t  this  have  atreadv  been 
described.  lombtning  the  HPi  and  HIP  into  one  unit  van  be  o!  advantage  t t om  the  maintenance  t and  point 
md  the  units  can  share  a common  mounting  t rav  etc. 

\ \ • - The  Mil  In  i omon  wi th  al  1 ot  '•»  t display  surfaces  « \ . < ■ * * • • •>  • < 11  ill  ra  tci 

dlsplax  for  reasons  ot  flextbilitv  and  power  dissipation. 

\n  all  raster  ylisplax  unit  lias  joss  complexify.  less  power  and  thermal  J 1 s >.  j pat  ton  together  w 1 1 )i  highn 
reliability  than  a mixed  calligraphic  raster  display  unit.  *svmbologv  for  tabular  or  over-lax  v ideo 
formats  can  be  generated  in  a suitable  ra  dt'i  compatible  waveform  geneiutor.  providing  readx  means  ot 
matching  brightness  and  position  ot  the  video  and  svmbol  overlap  the  format  vlesign  tlexibilitx  is 

aided  bx  contrast  inversion,  line  thickness  and  shading  facilities  This  approach  is  made  practical  bx 
the  development  work  carried  out  bx  the  1 ompanx  into  special  techniques  to  eliminate  staircase  and  flicker 
effect  • which  < otherwise  be  present  in  raster  display  ot  dxu.imw  sxmboli'gx  and  near  lu'r  1 :x'iital  lines. 
Hie  legibility  and  viMial  .juulifx  of  raster  generation  sxmbojs  using  these  techniques  are  comparable  with 
those  ot  stroke  written  sxmbols. 

These  techniijues  are  used  in  the  MKi  \ 1\  1 \l»  and  NIMKPP  \coust  ic  Pisplax  systems.  The  high  contrast  of 

the  displays  is  provided  bx  t In*  use  ot  a green  PKl  p!iosj»hor  in  conuinction  with  a matching  broad  based 
colour  filter  which  has  an  anti  reflection  coating  on  the  front  Mirf.i. c to  minimise  ambient  light 
reflect  unis . lhe  filter  attenuation  is  chosen  a-  a compromise  value  gixmg  the  highest  contrast  ratio 
consistent  with  maintaining  an  adequate  absolute  brightness  level  through  t he  filter. 

xolour  would  gixe  great  lx  enhanced  ability  for  coding,  maps  and  visual  dcclutting  of  the  displays  and  the 
improy ement  could  arguably  be  as  high  a-  that  ot  a domestic  colour  H compared  with  black  white.  Ked 
displays  would  assist  night  visual  adaption,  a factor  long  realised  for  MlU's , However,  ot  the  different 
method*  currently  employed  for  genet  at iug  colour  displays,  multi  gun  shaiU'wmask,  single  gun  beam  indexed, 
and  penetration  phosphor,  none  are  wholly  satisfactory  for  military  roles  where  ruggedness  and  high 
brightness  for  via'  time  use  are  concerned.  Nevertheless  it  is  quite  possible  that  colour  displays  will 
be  seen  on  future  aircraft  and  will  realty  the  full  potential  for  data  display  of  electronic  surt'.i*.c<. 

Helmet  Pisplax  Sight  system 

In  combat  the  pilot  will  wish  to  look  out  for  most  of  the  time  svy  to  be  as  aware  as  possible  of  the 
act  ions  ot  the  other  aircraft  involved  in  the  tight.  V Helmet  sight  System  iHSS'  van  provide  lum  with 
essential  mission  yl.it a while  he  is  looking  out  and  unable  tv'  refer  tv'  his  cockpit  displays.  Issential 
mission  data  coulvf  include 

Missile  aiming  and  lock  data. 

Ilectronic  high  priority  threat  warning. 

Inergv  rate. 

Hie  Marconi  \x  ionic-,  helmet  system  cv'iisists  of  a l IP  display  sub  system  and  a helmet  position  sensing 
sub  system  using  Ill's  and  tVl's. 

The  display  sub  system  uses  a IP  mm  square  matrix  addressable  v x v’  UP  array  the  image  of  which  is 
reflected  and  refracted  within  .1  prism  mounted  uist  above  the  upward  limit  ot  the  pilots  sight  line  on  the 
fri'ii  t of  his  helmet.  \fter  leaving  the  prism  the  light  rax  s are  reflected  to  the  pilots  exe  bx  a 

collimattng  combiner  which  max  be  part  of  the  inner  surface  of  the  helmet  yisor  or  a separate  component 

inset  into  the  visor.  The  collimating  display  will  subtoml  an  angle  of  1 at  the  pilots  exe  and  a 
perce ivoyl  brightness  of  l.'OO  tt  lamberts  can  be  achieved,  which  is  contry'lled  bx  an  .tut y'bri  1 1 lance 

sensor . 

The  helmet  posttiv»n  sub  system  shx'wn  in  figures  t ami  l consists  of  a triangular  set  01 

Ill's  on  either  side  of  the  helmet  which  flash  sequentially  The  rax s of  light  from  the  Ill's  pass  through 
V slits  onto  multi  bit  high  resolut  wmi  ill’s  where  the  ravs  are  sensed  in  two  places.  live  distance  apart 
ot  these  two  places  essentially  gives  the  e lex  at  txm  and  the  yh  stance  along  essential!'  gives  the  a.imuth 
of  the  line  of  sight  from  iVP  tv'  HP,  live  triangular  set  gives  y lines  ot  sight  which  are  geomet  r 1 v a 1 1 x 
related  to  the  direct  kmi  in  which  the  helmet,  and  hence  helmet  sight,  is  pointing.  V microprocessor 
based  computer  performs  line  of  sight  calculat tons , controls  the  UP  sot  and  display  sxmhologv.  Initial 
calibration  is  obtained  bx  a bores ight  prx'CCvlure  in  which  the  helmet  sight  and  HUP  N'resight  are  use.!  tv' 

give  a datum  from  which  the  helmet  sight  line  v't'  sight  is  then  c.i  tculatod . 

The  he  I me*  f mounted  equipment  adds  onl'  P./^kg  tv'  rhe  existing  helmet  weight  ami  the  system  copes  with  an 
angular  coverage  of  * ISP1  m x aw  and  * *P‘  in  pitch.  Such  systems  are  at  a late  stage  ot  development 
ami  haxe  been  subject  t o several  successful  flight  test  programmes.  Ill's  were  used  fv't*  the  display  m 
preference  tv'  a iKl  because  v't  weight,  robustness  ami  h'w  Vv'ltage  advantages.  Phis  syst.-m  cons wlerab l x 
increases  the  vvluine  y't  sk\  in  which  air  ty'  air  missile  engagement  is  possible  ami  bx  giving  the  missile 
some  y't  the  manoeuvring  task  that  the  a 1 tv  raff  would  otherwise  have  had  tv*  make  tv'  achieve  missile  W'ck, 
earlier  engagement  i<  possible. 
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Summary 

Io  sumnuri:i\  the  cockpit  of  future  combat  aircraft  roust  be  designed  fror  . pil  t's  functional  standpoint. 
t»iven  careful  design  and  the  ah : 1 1 1 v to  recon  f i gore  both  displays  and  control  la\out  to  cater  for  mode 
and  future  role  changes,  our  studies  indicate  that  electronic  displa\s  mil  enhance  the  ability  of  the 
single  seat  pilot  to  make  effective  use  of  the  advanced  s'  st  tins  .uni  ayile  airframe  envisaged  for  future 
combat  air  raft. 
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Future  cockpit  designs  will  aim  at  single  crew  operation  with 
a high  degree  of  display  integration.  The  subject  of  the 
paper  is  an  advanced  navigation  display  which  would  normally  be 
located  immediately  below  the  Head  Up  Display  in  order  to  show 
the  horizontal  situation. 

The  paper  draws  attention  to  some  ot  the  operational  require- 
ments and  then  describes  the  COMED  Combined  Display. 

The  display  combines  a full  colour  topographical  map  based  on 
35mm  film  with  a multi-mode  electronic  display  capable  of 
accepting  cursive  or  raster  information. 

Also  described  is  a planning  aid  permitting  horizontal  flight 
profiles  to  be  digitised  automatically  in  a briefing  room  from 
a conventional  paper  map.  Flight  plan  processing  is  possible 
and  the  resultant  data  can  be  loaded  into  a portable  store  which 
is  then  inserted  into  the  aircraft  system  so  that  the  planned 
profile  can  be  superimposed  on  the  topographical  map. 

The  display  concerned  has  been  fully  developed  and  demonstrated 
in  flight  and  the  planning  aid  has  completed  successful 
operational  trials. 


1.  INTRODUCTION 

The  environment  of  a single-seat  cockpit  is  particularly  exacting  in  t.rms  of  display  design  for 
a number  of  reasons.  There  is  a heavy  pilot  workload  caused  by  the  need  to  handle  the  aircraft,  its  major 
systems  and  the  weapon  system.  The  pilot  of  a single-seat  aircraft  flying  at  a very  low  altitude  has  to 
contend  with  turbulence,  flight  hazards  present  near  the  ground  and  threats  posed  by  enemy  defences  or 
other  aircraft.  The  canopy  design  is  usually  such  that  displays  are  subject  to  very  large  variations  in 
ambient  light  ranging  from  direct  sun  by  day  through  to  night  operations.  If  sensors  are  used  to  facili- 
tate operating  at  night  or  in  low  visibility,  their  information  must  be  displayed  and  assimilated. 

While  automation  and  correct  system  design  can  mitigate  some  of  these  problems,  the  essential  need 
is  for  better  displays.  The  most  important  display  surfaces  are  the  Head  Up  Display  and  the  situation 
display  immediately  below  it.  The  latter  must  have  an  electronic  multi-mode  capability  but  because  the 
aircraft  operates  in  close  proximity  to  the  terrain  and  as  the  pilots  are  accustomed  to  the  use  of 
topographical  maps,  a full  colour  map  display  is  extremely  attractive. 

The  paper  describes  the  COMED  Combined  Electronic  and  Map  Display  together  with  its  incorporation 
in  an  operational  system  designed  to  simplify  navigation  through  all  phases  from  pre- flight  briefing 
through  take-off  to  touch  down. 

2.  OPERATIONAL  AND  SYSTEM  REQUIREMENTS 

Some  of  these  have  already  been  dealt  with  in  the  Introduction . It  is  necessary  to  make  some 
assumptions  about  the  sensors  and  other  equipments  to  be  carried  in  the  aircraft  since  their  capability  to 
generate  information  determines  the  display  requirements. 

Accurate  navigation  is  of  prime  importance.  It  can  contribute  to  the  effectiveness  of  the  mission 
by  enabling  the  pilot  to  select  and  fly  a horizontal  profile  which  avoids  known  defences  and  exploit* 
terrain  screening  as  much  as  possible.  The  requirements  become  more  stringent  as  the  target  acquisitive 
phase  is  entered,  particularly  if  the  pilot  has  to  depend  on  the  relatively  narrow  window  afforded  by  a 
forward  sensor. 

Navigation  is  also  involved  in  determining  the  protection  available  against  collision  with  the 
ground  while  flying  low.  A sophisticated  Terrain  Following  System  can  give  fill  protection.  Alternatively, 
as  pointed  out  elsewhere  in  this  Symposium,  it  is  possible  to  consider  simpler  sensors  such  as  a laser  used 
as  a low  flying  terrain  avoidance  aid.  The  dependence  which  can  be  placed  on  such  systems  is  limited  by 
the  fact  that  they  are  essentially  single  channel  and  can  be  vulnerable  to  a single  failure.  The  back-up 
consists  of  careful  navigation  planning  and  a good  navigation  display  which  can  provide  the  pilot  with 
information  enabling  him  to  decide  how  to  modify  his  vertical  profile  ns  a compromise  between  additional 
vulnerability  due  to  flying  higher  and  the  risks  involved  in  continuing  low  flight  visually,  or  with  the 
aid  of  a visual  sensor.  This  is  an  extension  of  the  philosophy  of  a safety  height  used  in  simple  aircraft. 
Navigation/ . . . 


Navigation  workload  can  be  greatly  reduced  by  a combination  of  careful  planning  and  effective  display. 

The  source  of  navigation  information  is  likely  to  be  an  inertial  navigator.  There  are  several 
ways  of  enhancing  the  accuracy  of  such  a system.  There  i6  some  scope  for  performance  improvement  where  it 
is  permitted  by  the  potential  accuracy  of  the  instruments,  usually  by  data  processing  and  more  sophisticated 
methods  of  pre-flight  alignment.  In  the  future,  the  inertial  data  in  some  systems  will  be  mixed  with 
highly  accurate  position  and  velocity  information  from  future  aids  such  as  Navstar.  But  whatever  the  means 
selected,  updating  navigation  using  known  features  in  conjunction  with  forward  sensors  such  as  Ground 
Mapping  Radar  and  Electro-Optics  will  always  be  attractive  as  a means  of  improving  accuracy  or  increasing 
integrity.  The  display  system  should  permit  this. 

It  is  also  advantageous  to  have  a degree  of  redundancy  to  cover  failures  and  the  combination  of 
separate  moving  map  and  mLlti-mode  electronic  display  elements  permits  this. 

3.  DISPLAY  DESCRIPTION 


The  most  important  properties  of  a highly  readable  display  are  image  brightness  and  contrast. 

When  flying  head  up,  the  pilot  may  be  scanning  a bright  background  such  as  cloud  and  the  display  must  then 

be  bright  enough  to  be  legible  when  he  transfers  his  attention  to  it,  even  if  his  eyes  are  slow  to  adapt 

to  the  new  light  level. 

In  some  cases,  direct  bright  sunlight  can  shine  onto  the  front  face  of  a display,  and  the  contrast 

of  the  displayed  image  must  be  sufficient  to  maintain  legibility.  This  is  particularly  true  when  full 

advantage  is  taken  of  the  colour  and  content  of  a topographical  map.  The  resolution  of  the  image,  the 
viewing  distance,  the  effects  of  vibration  and  the  basic  suitability  of  the  maps  or  other  data  displaced  are 
also  important  factors. 

Figure  1 shows  the  basic  optical  principles  adopted  in  the  COMED  Display.  A projection  lamp, 
together  with  a condenser  and  a reflector,  is  used  to  generate  a full  coloured  map  image  from  data  stored 
on  35mm  colour  film.  The  image-forming  light  rays  from  the  projection  lens  are  reflected  by  a mirror  onto 
the  image-forming  screen. 

A combination  of  CRT  and  Map  images  is  presented  to  the  operator  via  a viewing  system  consisting 
of  a combining  mirror,  transfer  lens  and  field  lens.  As  a result,  the  map  and  CRT  images  appear  superimposed 
on  the  same  plane. 

An  important  feature  of  the  design  is  that  it  generates  an  exit  pupil  of  a size  only  sufficient  to 
cater  for  pilot  head  movement. 

This  method  of  optical  combining  and  a field  lens  was  selected  against  other  techniques  such  as 
the  rear  port  tube  because  of  a number  of  significant  advantages.  Ambient  light  cannot  fall  on  the  CRT  or 
map  images  because  to  do  so,  it  must  pass  through  the  exit  pupil,  which  is  almost  completely  filled  by  the 
pilot's  head.  The  brightness  of  the  primary  image  approaches  the  brightness  of  the  full  size  image  and  is 
almost  five  times  brighter  than  if  a full  size  image  screen  were  used.  For  an  equivalent  drive  power, 
twice  the  brightness  of  a full  size  (i.e.  six  inch  diameter)  tube  is  achieved  and  four  times  the 
brightness  of  a rear  port  tube. 

The  use  of  a smaller  CRT  makes  the  electron  geometry  easier,  resulting  in  a smaller  spot  size. 

The  tube  and  its  associated  drive  circuits  can  be  made  compatible  with  cursive  or  raster  writing  techniques 
and  raster  information  from  sensors  so  that  the  display  can  be  integrated  into  any  probable  conf igura tion . 

The  manner  in  which  the  film  is  handled  has  resulted  from  long  term  development.  A relatively  low 
powered  50  watt  projection  lamp  is  used  and  three  are  carried  together  with  an  automatic  change  mechanism. 

The  film  transport  is  highly  accurate  and  has  a high  slewing  rate  so  that  changes  taking  place  when  a 
film  strip  boundary  is  approached  appear  near  instantaneous  to  the  pilot.  A glassless  film  gate  deals  with 
the  problems  of  film  damage  experienced  with  some  earlier  displays.  The  display  is  aimed  at  high 
maintainability  and  is  completely  modular. 

35mm  film  is  a most  cost  effective  means  of  storing  full  colour  map  information.  A typical  unit 
can  accommodate  5 7 feet  of  film  at  a map  scale  of  and  a reduction  factor  of  15.  This  is  equivalent  to 
an  area  of  2000  by  2000  nautical  miles,  in  excess  of  the  whole  of  North  America.  Since  the  mean  film  speed 
is  5.7  feet  per  second,  the  maximum  access  time  is  10  seconds. 

The  earliest  combined  displays  were  relatively  bulky  and  were  tailored  individually  to  aircraft 
cockpits.  The  latest  version  shown  in  Figure  2 has  improved  optics  giving  a near  rectangular  screen  and 
an  installation  outline  aimed  at  single-seat  cockpit. 

4.  PLANNING  SYSTEM 

A comprehensive  mission  planning  system  has  also  been  developed.  It  is  described  here  in 
conjunction  with  the  display  but  it  is  in  fact  suitable  for  use  with  any  digital  navigation  system. 

Autoplan  consists  of  a table  on  which  a paper  map  or  chart  can  be  placed  in  the  briefing  room. 

A hand-held  cursor  can  be  placed  anywhere  on  the  map  and  is  connected  by  a single  table  to  the  electronics, 
which  include  a processor  and  a small  printer. 

The  pilot  places  his  map  on  the  table  and  initialises  the  digitising  system  by  inserting  the 
coordina tes  of  two  known  points.  He  then  uses  his  tactical  judgement  and  the  best  available  briefing 
information  to  choose  a best  route,  which  he  marks  in  pencil  on  the  map  as  a series  of  straight  line 
sectors.  The  cursor  is  then  moved  through  the  profile  from  one  turning  point  to  another,  a button  being 
pressed  at  each  to  cause  its  coordinates  to  be  transferred  to  the  processor.  Keyboard  entry  of  fixed 
parameters/ . . . 
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parameters  such  as  ground  speed  and  fuel  load  is  provided.  As  the  route  is  entered,  the  printer  prints 
out  the  various  sectors  and  gradually  accumulates  a complete  flight  plan  including  times  and  fuel.  The 
system  is  extremely  accurate  and  a 20  turning  point  flight  can  be  programmed  in  less  than  5 minutes, 
including  separate  treatment  of  IPs  and  targets.  Automatic  conversion  from  the  UTM  grid  to  lat/long 
coordinates  or  vice  versa  is  possible  and  additional  copies  of  the  printout  can  be  generated  on  demand. 

An  overlap  profile  from  one  map  sheet  to  another  can  be  handled. 

This  system  has  gained  rapid  pilot  acceptance  in  its  trials.  Tactical  choices  can  be  made 
because  the  time  to  compute  a single  route  is  so  short  that  alternatives  can  be  compared  for  timing  and 
fuel  implications.  Further  copies  of  the  flight  plan  can  be  printed  out  if  a number  of  aircraft  are  to 
operate  in  a group. 

The  PODS  (Portable  Data  Store)  facility  is  a further  system  refinement.  The  small  circular 
store  contains  a self-supporting  memory  and  is  plugged  in  to  the  ground  equipment  so  that  the  flight  plan 
can  be  recorded  in  it.  The  pilot  then  carries  the  store  out  to  the  aircraft  together  with  his  map  and 
other  briefing  information  where  he  inserts  it  into  a special  fixture  so  that  the  airborne  computer  is 
loaded  automatically.  Where  the  combined  display  is  fitted,  the  pilot  can  call  up  the  route  in  the  form 
of  a full  colour  topographical  map  with  his  planned  tracks  over-written  electronically.  Where  he  has 
stored  optional  tracks  for  use  in  a mission  or  in  the  case  of  a diversion,  he  can  recall  and  examine  these 
options  in  the  cockpit  before  committing  them  to  the  guidance  computer.  Clearly,  any  other  information 
which  can  be  expressed  as  lines  or  electronic  symbols  can  be  stored  as  part  of  the  briefing  process  and 
retrieved  on  the  display.  If  the  aircraft  is  fitted  with  forward  sensors,  points  at  which  there  are 
features  particularly  suitable  for  checking  progress  can  be  included  in  the  plan. 

The  essence  of  the  Au toplan/PODS  concept  is  to  enable  more  sophisticated  planning  of  missions 
while  reducing  the  workload  by  a system  of  automation  which  extends  from  briefing  through  to  touch-down. 

5.  CONCLUSIONS 


The  optically  combined  CRT/Moving  Map  display  is  now  a well  developed  technology  and  highly 
suitable  for  providing  a Horizontal  Situation  or  Navigation  Display  in  either  a two-seat  or  single-seat 
cockpit. 

Electronically  generated  information  including  information  from  sensors  or  computer  symbology  can 
be  overlaid  over  the  map.  Alternatively,  the  display  can  be  used  as  a full  electronic  multi-mode  display. 

It  is  therefore  suitable  for  integration  into  a weapon  system. 

The  display  uses  a field  lens  viewing  system  which  is  a highly  successful  means  of  offsetting  the 
effects  of  ambient  light  and  optimising  brightness  and  contrast  as  required  in  this  type  of  cockpit.  It 
has  been  shown  to  be  a satisfactory  means  of  displaying  information  at  very  low  light  levels  for  night 
flying  and  its  intrinsic  qualities  make  it  generally  superior  to  a pure  CRT  display. 

The  addition  of  a planning  aid  can  automate  the  complete  process  from  briefing  to  touch  down  by 
using  automatic  digitising  and  data  processing  on  the  ground  together  with  the  transfer  of  briefing 
information  to  the  aircraft  using  PODS.  There  are  many  advantages  in  more  sophisticated  mission  planning 
including  the  ability  to  exploit  the  terrain  fully  and  a reduction  in  cockpit  workload  in  the  air. 

A display  technology  has  developed  on  the  basis  of  a combined  map/radar  display  which  is  now 
in  production.  Further  development  has  produced  versions  aimed  at  advanced  single-seat  applications  in  which 
the  electronic  component  of  the  display  is  used  multi-mode  and  forms  part  of  an  integrated  display  system. 

The  Author  wishes  to  thank  those  colleagues  who  have  assisted  in  the  preparation  of  this  paper, 
particularly  Mr.  W.M.  Aspin,  who  is  the  Chief  Engineer  of  the  Group  responsible  for  these  developments. 

He  wishes  to  note  the  part  played  in  these  developments  by  officials  of  the  UK  Ministry  of  Defence  and  the 
Royal  Aircraft  Establishment.  Thanks  are  due  to  the  Management  of  Ferranti  Limited  for  permission  to 
publish  this  paper. 
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SUMMARY 

To  validate  the  information  content  of  synthetic  visual  flight  simulation, 
objectively  based  methods  and  criteria  are  necessary  which  can  show  the  influence 
of  a variety  of  visual  cues  on  pilots'  perception.  56  pilots  and  28  non-pilot  en- 
listed men  made  height  and  distance  judgements  from  landing  approach  scenes  with 
different  levels  of  detail.  Some  judgements  of  height  and  distance  were  made  in 
relation  to  a previously  shown  standard  scene.  Other  judgements  (absolute)  were 
given  in  ft  or  m . To  evaluate  the  influence  of  scene  information  simplification 
on  subjects'  perception  of  height  and  distance,  a number  of  measures  were  made 
including  judgement  time,  error  and  the  exponent  of  the  stimulus-response  rela- 
tionship R --  S . Judgement  error  and  the  exponent  of  fitted  power- functions  both 
were  significantly  influenced  by  scene  stylization.  The  increase  of  judgement  error 
and  the  decrease  of  power-function  exponent  respectively  are  more  distinct  when 
making  absolute  judgements  than  relative  ones.  Because  results  for  pilots  are  quite 
different,  non-pilots  should  not  be  used  as  subjects  for  visual  research  work  with 
landing  scenes. 


1.  INTRODUCTION 

The  advantages  of  using  simulators  in  the  field  of  vehicle  guidance  and  control  are  unquestionable.  For  cost  and 
safety  reasons  simulators  are  increasingly  used  for  education  and  training,  especially  for  pilot  training.  With  both 
whole  and  part-task  simulators  a realistic  full  simulation  is  frequently  necessary  for  the  correct  performance  of  complex 
operations.  In  addition  to  a realistic  cockpit  and  realistic  motion  and  noise  simulation  the  simulation  of  a relevant 
outside  view  is  frequently  necessary  for  good  flight  simulation. 

The  demand  for  a wide  range  of  simulation  applications  together  with  continuous  advances  in  engineering  has 
led  to  the  development  of  Computer-Generated- Image  Systems  (CGI)  which  have  certain  advantages  in  visual 
simulation  over  the  well  known  film  and  model  systems.  Despite  these  advantages  CGI  systems  suffer  from  the  dis- 
advantage of  limited  capacity  and  computing  speed  which  severely  restrict  the  amount  of  visual  information  which 
can  be  simulated  and  displayed.  Since  there  is  no  possibility  at  present  to  fully  simulate  the  natural  outside  view 
with  these  limitations  the  problem  becomes  one  of  selecting  only  that  visual  information  which  a pilot  actually  needs 
to  perform  his  special  tasks,  i.e.  which  visual  cues  must  be  presented  to  obtain  a good  visual  flight  simulation. 

Previous  research  in  visual  perception,  has  in  most  cases,  used  subjective  methods.  It  has  been  tried,  for  ex- 
ample, by  questioning  pilots  to  reveal  which  of  the  external  cockpit  visual  cues  provide  them  with  distinct  informa- 
tion about  distance,  attitude,  altitude,  velocity  and  so  on.  Apparently  such  an  approach  will  be  somewhat  inaccurate 
because  the  perception  of  most  experienced  pilots  and  the  performance  of  many  aspects  of  their  tasks  are  unconscious. 
Therefore  it  would  be  impossible  for  them  to  give  precise  answer  abouf  the  influence  of  special  objects  or  elements  in 
their  visual  perception  on  their  visual  judgement  performance.  That  is  the  reason  why  scientifically  correct  statements 
about  the  requirements  of  visual  scenes  in  flight  simulation  can  not  yet  be  made  [ 2,  3]  . 

2.  RESEARCH  OBJECTIVES  AND  VARIABLES 

Because  of  an  increase  in  the  use  of  computer  generated  image  systems  for  flight  simulation  there  rises  the 
question  if  such  a stylized  outside  scene,  which  has  limited  visual  information  content,  is  sufficient  for  flying  an 
aircraft.  To  answer  this  question  it  will  be  necessary  - if  possible  - to  separate  out  the  influence  of  the  visual  in- 
formation provided  by  the  different  objects,  details  and  structures.  For  this  purpose  one  needs  appropriate  objective 
methods  which  allow  specific  conclusions  about  the  influence  of  visual  information  on  pilot's  perception. 

Because  of  the  large  amount  and  variety  of  visual  cues  in  a real  environment  , which  increase  in  significance 
with  vehicle  motion  (motion-parallax,  streaming-patterns)  first  experiments  dealt  only  with  static  external  scenes.  The 
information  requirements  of  external  visual  scenes  are  strongly  dependant  on  the  specific  task  to  be  performed.  Since 
pilots  during  the  landing  approach  depend  heavily  on  the  use  of  visual  information  in  the  external  scene,  this  flying 
phase  was  chosen  for  research  purposes. 
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During  the  landing  approach  the  pilot'*  peiception  of  height  and  distance  is  of  great  importance.  Our  goal  was 
to  measure  the  influence  of  image  stylization  of  landing  approach  scenes  on  pilot's  perception  of  height  and  distance 
IS  'X  b/  means  of  two  different  estimation  tasks. 

An  evaluation  of  the  results  should  give  hints  to  how  useful  these  tasks  are  when  testing  visual  simulation  systems 
for  various  tasks  or  missions. 

One  estimation  task  was  the  making  of  "relative  judgements"  of  the  presented  stimuli  which  seemed  to  be  a 
straight  forward  task  appropriate  to  a landing  approach  where  the  pilot  in  most  coses  checks  his  position  in  relation 
to  the  required  glide-slope  on  the  basis  of  a well  learned  model  of  runway  shapes  corresponding  to  various  above, 
correct,  and  below  positions  at  different  relative  distances  6 . 

Since  it  is  likely  that  some  pilots  in  certain  situations,  especially  military  pilots,  may  have  to  make  "absolute 
judgements"  (although  not  necessary  of  height  and  distance),  it  was  decided  to  ask  subjects  to  make  absolute  estimates 
during  the  second  part  of  the  program. 

A comparison  of  research  results  between  the  two  types  of  estimates  may  help  to  answer  the  question  which  task 
and  which  of  the  measures  (explained  later)  will  show  the  influence  of  scene  stylization  on  judgement  pe. formance 
best. 

3.  EXPERIMENTS 

3. 1 RESEARCH  METHODS 

It  was  the  aim  of  the  research  work  to  find  objective  methods  by  means  of  which  the  influence  of  image  styli- 
zation of  landing  approach  scenes  on  height  and  distance  perception  could  be  evaluated, 

As  visual  space  perception  depends  strongly  on  the  information  content  of  the  external  scene,  a relation  be- 
tween a visual  stimulus  and  the  resulting  response  (perception)  of  an  observer  has  to  be  established 


R f (S) 


S - stimulus 


R - response 


and  the  change  of  this  relation  with  changes  in  stimuli  has  to  be  evaluated. 

A relationship  where  a subjective  reaction  depends  on  an  objective  stimulus  can  be  described  as  a psychophys- 
ical function.  These  psychophysical  relationships  have  often  been  written  as  power  functions  4 

R a (S  - S ) " 
o 

With  suitable  dimensions  and  a big  stimulus  area  in  relation  to  the  perception  threshold  constants  may  be  neg- 
lected : 

R~  S" 

There  exist  a number  of  different  psychophysical  measuiement  techniques  which  differ  in  the  level  of  measurement 
scale  which  can  be  used,  i.e.  ordinal,  interval  or  ratio  scale  5^  . 

The  ratio  scale  is  characterized  by  equidistant  steps  and  the  use  of  the  zero  as  the  origin.  It  is  the  most  prefer- 
red type  of  scale  in  psychophysics  because  one  can  use  all  of  the  parametric  statistics  with  it.  Measuring  methods 
which  yield  ratio  scales  include  the  magnitude  estimation  methods  which  hove  their  origin  in  the  work  of  STEVENS,  S.S. 

Relative  estimates  made  during  the  first  part  of  the  program  were  estimates  of  height  and  distance  fiom  presen- 
ted slides  as  percentages  of  "standard"  height  or  distance  from  a "standard"  slide  scene  shown  before. 

The  absolute  estimates  made  during  the  second  part  of  the  program  were  estimates  of  height  or  distance  in  ft  or 
meter  (as  each  subject  preferred) . 

The  "standard"  slide  was  shown  before  each  slide  presentation  in  the  first  of  the  two  runs  which  each  subject 
made.  During  the  second  run  the  standard  slide  was  only  shown  in  the  beginning  of  the  run  itself.  This  was  done  to 
reduce  the  running  time  of  the  experiments  since  the  subjects  were  familiar  with  the  standard  slide  after  the  first  run. 

3.2  MATERIAL  (APPROACH  SCENES  USED  AS  STIMULI) 

For  our  research  we  used  colored  slides,  representing  external  visual  scenes  of  a landing  approach.  As  subjects 
were  to  make  judgements  from  these  pictures,  height  and  distance  had  to  be  well  known  to  the  experimenter.  Because 
of  the  great  difficulties  and  costs  of  taking  exact  position  pictures  from  the  real  world,  slides  were  photographed 
from  the  LUFTHANSA  model  simulation  system  in  Frankfurt/M.  The  TV  camera  could  manually  be  driven  at  different 
positions  in  accordance  with  specific  values  of  height  and  distance.  The  corresponding  pictures  of  the  outside  scenes 
were  taken  from  a color  TV  monitor. 


In  this  way,  slides  of  21  positions  were  produced,  of  which  12  scenes  represented  12  different  distances  from 
the  runway  threshold  on  a 3 glide-slope  and  9 scenes  represented  9 heights  with  a fixed  distance  from  the  runway 
threshold  (Fig.  1). 


Fig.  I Positions  representing  the  different  opprooch  scenes 

Because  there  was  no  CGI  system  at  our  disposal  at  the  beginning  of  the  research  work,  stylized  scenes  were 
produced  on  a drawing  board.  This  was  done  by  rear  projection  of  the  full  scenes  onto  a translucent  glass  from  which 
the  visual  elements  were  abstracted  by  stepwise  selecting  and  coloring  with  translucent  color  sheets  only  the  desired 
scene  elements.  Synthesized  pictures  were  produced  in  five  steps  or  degrees  of  stylization  with  the  simplest  ones 
consisting  only  of  the  trapezoidal  looking  runway  and  horizon  (see  table  I and  figure  2). 

There  were  not  raster  points  in  the  colored  slides  presented  for  judgement.  The  raster  points  on  the  runway  in 
figure  2 were  only  used  for  printing  to  show  the  levels  of  contrast  and  detail  respectively  as  they  existed  by  color. 


Table  1 Steps  of  Stylization 


Step 

reduction  of  scene  elements 

i 

texture,  small  objects,  simple  structure 

ii 

all  3-dimensional  objects 

in 

all  structure  without  runway  and  approach  lights 

IV 

approach  fights  and  runway  fhresho/d 

V 

runway  centerline  and  border 

3.3  EXPERIMENTAL  APPARATUS 

Selected  color  landing  approach  slides  were  projected  on  a rear  translucent  projection  screen  with  a Leitz 
Pradovit  S projector.  Duration  of  slide  presentation  and  changing  of  slides  was  regulated  by  an  electromechanical 
circuit.  When  slides  were  changed  the  projector  was  darkened  by  a shutter. 

Subjects  sat  in  front  of  an  acryl-plastic  FRESNEL  lens  at  a focal  length  distance  which  was  equal  to  the  dis- 
tance between  the  lens  and  the  projection  screen  (Fig.  3). 
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By  so  doing,  the  visual  angle  subtended  by  objects  in  the  slides  would  remain  constant  even  if  the  subject 
moved  his  head  in  the  direction  of  the  optical  axis  of  the  system  (i.e.  closer  or  further  owoy). 

Use  of  the  FRESNEL  lens  and  a surrounding  frame  resulted  in  a depth  impression  similar  to  a real  world  scene 
looked  at  through  a cockpit  window. 

Subjects  sat  on  a chair  which  could  be  changed  in  height  so  that  their  eyes  were  coincident  with  the  centre  of 
the  lens  and  the  horizon  of  the  projected  scenes.  The  screen  size  of  40  x 60  cm  provided  a viewing  situation  to  sub- 
jects with  the  same  48  horizontal  and  36  vertical  visual  angle  used  in  the  Lufthansa  model  TV  system. 

3.4  SUBJECTS 

For  the  relative  estimate  series  of  experiments  there  were  3 groups  of  subjects  with  12  in  each  group.  These 
were  cargo  (Transall)  pilot,  jet  (Starfighter)  pilot  and  non-pilot  enlisted  men  groups. 

For  the  absolute  estimate  series  of  experiments  there  were  3 seperate  groups  of  subjects  with  !6  in  each  group. 
These  were  helicopter  (Bell  UH-1D)  pilot,  jet  (Phantom)  pilot  and  non-pilot  enlisted  men  groups. 

Pilot  age  ranged  between  24  and  44  years  with  a median  of  29  years. 

Their  flight  hours  were  between  270  and  4000  with  a median  of  1300  hours. 

The  age  of  non-pilot  enlisted  men  was  between  19  and  25  years  with  a median  of  20  years. 

3.5  PROCEDURE 

A general  introduction  of  the  purpose  of  our  research  was  first  given  to  all  our  subjects  followed  by  more  detailed 
information  which  was  recorded  to  minimize  variations  in  experimenter  influence  resulting  from  inconsistent  presentations. 
Subjects  were  then  familiarized  with  our  autoniatic  slide  presentation  procedure  and  given  some  practice  in  making 
"relative"  or  "absolute  estimates".  The  approach  scene  slides  were  not  used  for  practice,  instead  a substitute  series  of 
practice  slides  involving  judgement  of  the  length  of  various  horizontal  lines  were  used  so  that  no  training  in  height 
or  distance  judgement  was  given. 

Right  after  fami liarization  with  procedure  and  estimate  practice,  data  collection  began  with  the  presentation  of 
a group  of  slides.  With  the  exception  of  half  of  the  non-pilot  subjects  making  relative  estimates  subject  groups  mode 
height  judgements  first,  and  after  a break  of  20  minutes  to  2 hours  made  distance  judgements. 

The  slides  representing  various  combinations  of  variables  were  arranged  in  a random  sequence  as  determined  by 
drawing  numbers  out  of  a hat.  Experimental  variables  used  were  the  degree  of  stylization,  judgement  height,  and 
judgement  distance.  The  "standard"  slide  was  a "full  scene"  slide  which  was  taken  at  a position  corresponding  to  a 
height  of  100  ft  and  a distance  of  2 000  ft  from  runway  threshold.  This  slide  was  shown  prior  to  every  slide  to  be 
judged  for  the  relative  and  the  absolute  estimation  during  the  first  run.  The  entire  group  of  slides  was  presented  twice 
to  subjects.  But  because  of  the  great  number  and  variety  as  well  as  the  random  order  of  the  slides,  subjects  did  not 
realize  that  they  judged  the  same  slides  twice. 

Slide  presentation  duration  was  5 seconds  for  the  standard  scene  and  8 seconds  for  other  slides. 

4.  DATA  TREATMENT  AND  RESULTS 

To  measure  the  influence  of  image  stylization  on  height  and  distance  perception  from  landing  approach  scenes, 
the  exponent  (n)  of  fitted  power-functions,  the  absolute  value  of  the  relative  estimation  error  (ERA)  and  the  estimation 
time  (t)  were  calculated. 

The  values  of  the  exponents  of  the  stimulus-response  relationship  express  a tendency  of  under  or  overestimation 
of  great  stimuli  in  the  lange  used  . When  calculating  the  absolute  value  of  relative  estimation  error  there  is  the  possi- 
bility of  determining  the  amount  of  the  error  for  each  stimulus  separately  as  well  as  the  over-all  error. 

Calculation  of  the  research  data  was  done  by  means  of  ANOVA  45,  a computer  program  for  analysis  of  variance 
81  . Basically  a multi-factor  plan  was  selected,  and  the  variances  of  the  dependent  variables  were  proved  against 
their  interaction  with  subjects  91  . 

For  comparison  of  the  two  different  tasks  used  and  the  different  measures  selected,  with  regard  to  reliability, 
rank-correlations  were  calculated  11], 

It  was  examined  for  which  judgement  task  and  which  measure  there  was  the  best  correlation  between  an  increase 
in  scene  stylization  and  a change  in  the  value  of  the  specific  measure. 

For  this  purpose  rank  numbers  were  assigned  to  the  mean  estimation  errors  and  the  calculated  power-function 
exponents  of  each  subject  for  the  six  succeeding  degrees  of  stylization  with  regard  to  their  magnitude.  By  means  of 
this  procedure  coefficients  can  be  calculated  representing  a measure  of  correlation  between  two  rank-orders. 

4.1  POWER-FUNCTION 

The  first  measure  used  was  the  exponent  n of  the  psychophysical  relationship  R - Sn.  By  means  of  fitted  power- 
functions  of  subjects'  height  or  distance  judgements  a systematic  change  of  the  psychophysical  relationship  as  a result 
of  scene  stylization  was  determined. 


From  the  data  for  each  subject  which  were  in  the  form  of  (S.,  R.)  ; i 1,  2,  m'  power -functions  were  calcu- 

lated for  height  as  well  as  for  distance  judgements  for  each  degree  of  stylization. 

By  transformation  the  problem  can  be  reduced  to  solving  a lineare  regression  10 
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and  the  exponents  can  be  computed  by  means  of  a program. 

Figure  4 gives  the  powei -function  exponent  for  height  judgements.  Foi  each  degree  of  stylization  the  exponent  n 
has  been  calculated  for  all  pilots  as  a group  as  well  as  for  non-pilot  subjects  foi  both  relative  and  absolute  estima- 
tion tasks. 
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Fig.  4 Power-func tion  exponent  of  height  judgement 

There  is  an  over-all  tendency  for  power-function  exponent  to  decrease  with  scene  simplification  which  will  lead 
to  a larger  amount  of  underestimation  of  height  from  more  stylized  scenes. 

But  there  are  clear  differences  between  the  exponents  of  pilots  and  non-pilots  respectively. 

For  both  relative  and  absolute  height  judgements  the  values  of  n aie  smaller  for  non-pilots  than  tor  pilots. 

The  differences  are  smaller  for  unstylized  scenes  than  for  stylized  or  simplified  scenes. 

The  influence  of  image  stylization  is  greater  foi  absolute  estimates  than  for  relative  estimates.  Analysis  of 
variance  shows  that  there  arc  significant  differences  between  relative  and  absolute  results  as  well  as  between  results 
of  pilots  and  non-pilots. 

In  figure  5 the  power -function  exponent  n of  distance  judgements  by  pilots  and  non-pilots  with  both  estimation 
tasks  are  shown. 
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Fig.  5 Powei -function  exponent  of  distance  judgement 
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As  seen  in  figuie  4 for  distance  judgement  too  there  is  the  tendency  of  power-function  exponent  to  decrease 
with  scene  simplification. 

While  the  values  of  n in  the  two  tasks  are  significantly  different  the  differences  between  pilots  and  non-pilots 
within  each  task  were  not  significant. 

The  stronger  decrease  of  the  exponent  for  absolute  distance  judgements  than  for  relative  estimates  indicates  a 
clearer  influence  of  scene  stylization  with  the  absolute  task.  This  is  verified  by  an  analysis  of  variance  which  shows 
more  significant  differences  between  degrees  of  stylization  with  the  absolute  distance  judgements  by  pilots  than  for 
relative  judgements.  For  non-pilots  a clearer  influence  of  scene  stylization  with  absolute  distance  estimates  was  not 
shown  by  analysis  of  variance. 


4.2  ESTIMATION  ERROR 
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Another  measure  for  calculating  the  influence  of  scene  stylization  on  visual  space  perception  was  the  error  made 
by  subjects  in  making  height  or  distance  judgements.  To  get  this  measure  the  difference  between  each  subjects'  res- 
ponse and  the  actual  correct  height  or  distonce  was  calculated.  The  absolute  amount  of  this  difference  was  divided 
by  the  correct  height  or  distance  value  in  order  to  obtain  relative  estimation  errors,  i.e.  errors  normalized  relative 
to  the  magnitude  of  the  height  or  distance  judged. 

Figure  6 gives  the  relative  estimation  error  for  height  judgements. 
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Fig.  6 Height  judgement  error 

As  can  be  seen  in  figure  6,  for  both  estimation  tasks  and  both  subject  groups  there  was  an  over-all  tendency 
for  estimation  error  to  increase  with  increased  degrees  of  scene  stylization. 

The  differences  in  errors  between  pilots  and  non-pilots  for  both  estimation  tasks  are  quite  large.  There  are 
smaller  errors  for  pilots  than  for  non-pilots  when  making  relative  estimates,  but  there  are  larger  errors  for  pilots  than 
for  non-pilots  with  thte  absolute  judgements. 

There  are  no  significant  differences  between  tasks  with  non-pilots. 

The  error  differences  between  tasks  with  pilots  are  very  large  and  very  significant. 

There  are  no  significant  differences  between  estimation  errors  for  different  degrees  of  stylization  with  absolute 

height  judgements  by  non-pilots  and  only  few  significant  differences  with  relative  estimates  by  non-pilots  and  pilots. 

Error  differences  between  successive  degrees  of  stylization  were  not  significant  for  all  conditions  except  the 

absolute  judgement  by  pilots,  where  there  are  most  significant  differences  between  degrees  of  stylization  at  all. 

There  were  generally  significant  differences  between  unstylized  scenes  and  stylized  scenes  for  both  subject 
groups  and  both  tasks. 

Figure  7 gives  the  distance  judgement  error  for  both  estimation  tasks  and  for  pilots  as  well  as  for  non-pilots. 

For  both  subject  groups  and  tasks  there  is  an  over-all  tendency  for  error  to  increase  with  stylization  step  increases. 
This  general  tendency  is  significant  in  all  four  cases. 

The  large  differences  seen  between  pilots  and  non-pilots  with  height  judgements  do  not  occur  with  distance 
judgements.  Mean  error  for  pilots  with  absolute  judgements  was  significantly  larger  than  for  all  other  cases. 

There  were  no  significant  differences  between  any  of  the  other  cases. 

Results  from  the  analysis  of  variance  program  showed  that  with  distance  judgements  there  were  significant  differ- 
ences between  stylized  and  unstylized  scenes  but  no  significant  differences  between  the  degrees  of  stylization  except 
for  two  steps  with  the  absolute  task  for  pilots. 


I s .s 


non  pilots 

telot'vg 

puots 


non  pilots 
absolute 


o i o m k v 

deyipf  of  styli/Otion 


Fig.  7 Distance  judgement  erroi 


4.3  REACTION  TIME 

The  third  measure  used  to  evaluate  the  information  content  of  outside  scenes  fot  visual  space  perception  was  the 
reaction  time  of  subjects  when  making  height  or  distance  judgements. 

Because  subjects  wore  asked  by  instructions  to  answer  exactly  and  quickly  as  possible,  calculating  the  reaction 
time  seems  convenient.  "Reaction  time"  was  the  time  from  presentation  of  the  scenes  on  the  screen,  marked  by  an 
acoustic  signal,  until  the  verbal  estimation  response  by  the  subjects.  It  was  supposed  that  stylization  of  the  outside 
scene,  because  of  the  decrease  in  visual  information,  would  reduce  the  power  of  judgement  7 . Therefore  subjects 

may  deliberate  longer  which  would  produce  an  increase  of  reaction  time. 

Figure  8 shows  the  reaction  time  and  the  standard  deviations  for  estimating  height  and  distance  for  the  different 
degrees  of  stylization. 
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Fig.  8 Reaction  time  of  height  and  distance  judgement 


The  mean  reaction  time  of  3.6  sec  is  the  same  for  height  as  well  as  tor  distance  judgement.  No  significant 
differences  in  reaction  time  between  different  degrees  of  stylization  were  found.  There  were  also  no  significant  dif- 
ferences between  subject  groups  or  between  height  or  distance  judgement  reaction  times. 

The  calculated  standard  deviations  for  both  height  and  distance  judgement  reaction  times  were  nearly  equal  for 
all  degrees  of  stylization.  The  standard  deviation  for  each  stylization  step  was  rather  large,  being  around  1.3  seconds 
on  the  average  which  indicated  large  individual  differences  between  subjects.  On  the  other  hand,  variations  in 


reaction  time  for  each  subject  across  the  stylization  steps  was  very  small,  indicating  that  subjects'  reaction  time  was 
rather  consistent  regordless  of  the  degree  of  stylization. 

No  correlations  between  estimation  error  and  reaction  time  or  between  flying  experience  and  estimation  error 
or  flying  experience  and  reaction  time  were  found.  Results  indicate  that  judgement  reaction  time  do  not  represent 
the  time  required  for  height  or  distance  judgement  but  rather  the  longer  time  for  transforming  this  judgement  into 
numerical  data  and  verbal  reactions. 

Therefore  reaction  time  may  not  be  an  appropriate  measure  for  evaluating  scene  stylization  influences  on  visual 
space  perception. 
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4.4  SUMMARY  AND  DISCUSSION  OF  RESULTS 

Six  groups  of  military  pilots  and  non-pilot  enlisted  men  made  height  and  distance  judgements  from  landing 
approach  scenes. 

Two  tasks  were  used  to  get  subject  responses  from  static  image  stimuli. 

One  half  of  the  subject  groups  made  height  and  distance  estimation  in  relation  to  a standard  approach  scene 
whereas  the  other  groups  made  absolute  judgements  in  ft  or  meter. 

To  measure  the  influence  of  image  simplification,  estimation  error  (ERA),  the  exponent  of  psychophysical  power- 
functions  (n)  and  judgement  reaction  time  (t)  were  calculated. 

Results  with  relative  as  well  as  with  absolute  judgements  of  height  and  distance  were  quite  different  between 
the  various  measures. 

Judgement  reaction  times  did  not  show  any  significant  differences  between  stylization  steps.  Therefore  reaction 
time  probably  is  not  an  appropriate  measure  to  validate  synthesized  scenes  for  simulation. 

For  comparison  of  estimation  error  and  power-function  exponent  with  both  judgement  tasks  with  regard  to  relia- 
bility, rank-correlations  were  calculated.  Table  2 gives  the  means  ot  correlation  coefficients  for  height  and  distance 
judgements  with  both  research  tasks  (relative  and  absolute)  and  for  both  measures  (error  and  exponent). 


Table  2 Coefficients  of  rank-order  correlations 


method 

measure 

r^  (height) 

r^  (distance) 

relative 

error  ERA 

0.18 

0.28 

exponent  n 

0.21 

0.26 

absolute 

error  ERA 

0.37 

0.33 

exponent  n 

0.37 

0.32 

Calculation  of  rank-correlation  coefficients  shows  higher  values  with  the  absolute  than  with  the  relative  task 
for  height  and  distance  judgement  as  well  as  for  the  measures  error  and  exponent  respectively. 

This  indicates,  that  with  the  absolute  estimation  method  the  influence  of  scene  stylization  is  demonstrated  more 
distinct  than  with  the  relative  method.  Between  coefficients  for  estimation  error  and  power-function  exponent  there 
is  no  remarkable  difference.  Both  measures  seem  to  be  equivalent  for  demonstrating  the  influence  of  scene  stylization. 

But  power-function  exponents  are  rather  erratic,  giving  highly  different  values  as  a consequence  of  a large  num- 
ber of  variobles  (e.g.  stimulus  range,  spacing  of  standard,  naming  of  standard  etc.  f 12,  13,  14]).  Further  more  power- 
function  exponents  are  not  a measure  of  specific  stimulus-response  events  but  are  rather  arbitrary  descriptions  of  groups 
of  events.  Therefore  power-function  exponents  seem  to  be  less  dependable  and  less  appropriate  as  a measure  than 
estimation  errors.  On  the  other  hand  estimation  errors  seem  to  have  a direct  relevance  to  the  task  of  flying  the  land- 
ing approach  because  height  and  distance  estimates  by  the  pilot  are  directly  involved  in  the  task  of  flying  the  ap- 
proach and  making  a landing.  Consequently  estimation  errors  seem  to  be  the  more  appropriate  and  credible  measure. 

During  calculation  of  estimation  errors  from  subject  responses  of  height  judgement  an  effect  was  obtained,  which 
might  lead  to  another  possible  research  method  : For  only  three  distinct  images  at  step  IV  of  stylization  some  pilot 
subjects  made  estimation  errors  up  to  700%  which  were  unequal  to  errors  for  other  scenes  of  the  same  degree  of 
stylization. 

An  exact  examination  of  these  approach  scenes  led  to  the  assumption  that  the  reason  for  this  misjudgement  was 
a shortcoming  in  producing  the  stylized  approach  scenes.  By  the  appearance  of  a contrast  threshold  at  the  color  TV- 
monitor  where  the  slides  of  the  stylized  approach  scenes  were  taken  from  the  left  side  of  the  white  runway  surround- 
ing was  broadened  and  became  parallel  instead  of  being  perspectively  reduced.  This  led  to  an  overestimation  of  height 
by  some  military  subjects  because  from  very  high  positions  these  lines  seem  to  be  nearly  parallel.  For  the  subjects 
concerned  the  remaining  information  content  in  the  scenes  of  stylization  step  IV  was  not  sufficient  to  get  the  correct 
perception  of  height  but  was  concealed  by  the  geometric  error.  This  indicates  that  there  will  be  the  possibility  to 
produce  geometric  or  perspective  errors  on  purpose  and  to  evaluate  up  to  which  extent  of  stylization  subjects  get 
correct  visual  space  perception.  By  this  method  there  will  be  the  possibility  to  find  cues  supporting  correct  visual 
perception  or  others  being  of  no  influence. 


ML 
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Though  there  had  been  used  static  landing  approach  scenes  as  stimuli  for  our  research,  it  should  be  possible  to 
, use  methods  and  criteria  for  dynamic  research  too.  One  can  expect  that  there  will  be  more  visual  information  by  the 
'5  ft  additional  cues  of  motion  (e.g.  parallax,  streaming  patterns,  etc.)  for  perception  of  height  and  distance  too.  By 
that  an  improvement  of  visual  perception  will  be  obtainable. 

It  should  be  verified  however  whether  there  will  be  a fundamental  change  in  the  ter>dency  of  error  or  power- 
function  exponent  data  by  dynamic  experiments  compared  to  the  results  of  our  previous  static  experiments.  Further 
research  will  have  to  be  conducted  in  order  to  show  in  how  far  static  data  is  transferable  to  dynamic  situations. 

Besides  the  intention  to  produce  appropriate  research  methods  there  was  the  question  whether  non-pilots  could  be 
used  as  subjects  for  visual  research  with  flight  scenes.  The  reason  is  the  well  known  need  tor  pilot  subjects  and  the 
better  availability  of  non-pilots  as  well  as  a simplification  of  research  program  and  perfonnance  if  the  procedure 
could  be  done  in  the  laboratory. 

Though  there  were  no  geneial  differences  in  the  tendency  of  the  results  between  pilots  and  non-pilot  subjects 
the  analysis  showed  that  there  weie  significant  differences  between  the  two  subject  groups  at  least  for  height  judge- 
ments. These  differences  depend  on  different  experience  and  therefore  on  the  use  of  different  visual  cues  of  external 
scenes  in  visual  space  perception. 

This  is  a reason  while  non-pilots  should  not  be  used  as  subjects  for  visual  research  work  with  landing  scenes. 
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Accept  wee  f "...  auth  pity  Fly-By-Wire  [FBW  flight  :ontrol  techniques,  as  a 
viable  technology  fop  further  expanding  classical  design  boundaries,  has  paved  the  way 
f p • ntlnued  level  ; ment  and  exploitation  f t her  innovative  flight  :ontrol  :oncepts . 
These  include  decoupled  flight  path  control,  mi S3 ion-tailored  control  modes,  and  fault 
■ 1 rant  systeB  meehanizat 1 ns.  The  ; irpose  f this  paper  i ■ highlight  s me  f the 
more  critical  design  considerati  ns  for  successfully  integrating  these  advanced  conce;  • 
in  a multi-role,  high  performance  fighter  aircraft  lesign,  t achi<  v-  lmpr  v<  i v rail 
mission  effectiveness  and  cost  of  ownership  without  sacrificing  system  reliability  an  i 
safety.  The  concept  of  integrated  mission-tail  red  • ntr  1 m ;•  is  th  n<  ?•  log! 

step  in  the  progression  of  advanced  flight  control  techn  1 gy.  Results  ft lent ly 

complied  Fighter  Control  Configured  Vehicles  (CCV)  flight  test  pr  gram  have  ] r vide! 
valuable  Insight  and  substantiating  technical  data  for  future  design  and  application  f 
active  control  technology.  This  program  was  primarily  concerned  with  the  development  and 
evaluation  of  decoupled  six  degrees-of-f reedom  flight  path  control  techni  lues.  Spi  :ifi 
CCV  features  evaluated  during  the  flight  test  program  included  (a)  maneuver  enhancement/ 
gust  alleviation,  (b)  direct  lift  and  sldeforce  control,  (c)  independent  fuselage  point- 
ing and  translation,  and  (d)  variable  relaxed  static  stability.  Implementatl  n f then-- 
CCV  capabilities  presents  unique  pilot  Interface  considerations,  which  must  be  addressed 
in  terms  of  required  displays,  controllers,  vehicle  response  dynamics  and  mission 
applications.  The  resulting  matrix  of  possible  mode  configurations  and  mission  segment/ 
task  applications  is  considerably  expanded  over  conventional  mechanizations.  Application 
of  digital  technology  is  considered  a prerequisite  for  integrating  ’ hese  advanced  CCV 
features  in  a practical  and  affordable  mission-tailored  multimode  flight  control  system 
design . 


LIST  OF  SYMBOLS  AI.'D  ACRONYMS 

A.j  Dir  ct  Lift  Control 

a.  Elevation  Fuselage  Pointing 

a ^ Vertical  Translation 

Ay  Direct  Sldeforce  Control 

Azimuth  Fuselage  Pointing 
Lateral  Translation 

C*  Longitudinal  Flying  Qualities  Parameter 

c.g.  Center  of  Gravity 

g Acceleration  due  to  Gravity 

K ft  1000  feet 

M Mach  Number 

mac  Mean  Aerodynamic  Chord 

Xs  Composite  Sensor  Coverage 

Xc  Computer  and  I/O  Coverage 

Xa  4 * Actuator  Coverage 

Xzj  Total  Second  Fault  Coverage 

As  Composite  Sensor  Failure  Rate 

Ac  Computer  and  I/O  Failure  Rate 

Aa  Actuator  Failure  Rate 
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LATERAL  TRANSLATION  -#2 

Figure  4 Airplane  Translation  Control  Modes 
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' ’ 0 V Flight  Testing 

Flight  testing  of  the  CCV  features  included  a let  a 1 1 *-d  engineering  evaluat  1 j.  f • 
gain  ’harao  terlst  Ics  , rru  !>•  maneuver  evaluat  I-u;s , alr-t  i r Hand  1 lr.r  .,'ri  1 ! • !<•.-;  During 
[•racking  xercises , tnd  an  pe  ra  1 1 ona  1 t y p<  evaluat  1 i t hat  * one en t rat e<3  n t y p 1 

iir-t  - md  tas  s.  Pw  project  pll  ts  and  f ir  pj  t fi  ■ th<  - • I int 

Ft  tree  ; irticij  lied  In  th<  evaluate  n.  ' mm<  nts  1 r i this  ; tj  p limit*  | prin 
demon:*  t.  rated  and  projected  appllcat  lens  and  limit  at  ! uis  f und  In  evaluat 1 u.  • f t !.•■ 

1 ' • liscusslon  >f  each  typ<  >f  »C\  ntr  n i f . End  rsement  fa  n 1« 

Implies  t hat  the  pilot  achieved  tetter  performance  to  the  basic  YF-16  as  implement  »*d  or 
recognized  a potential  Improvement  If  the  mode  were  impl emented  more  effectively. 

ivei  Enhai  ;ement  - Phis  *1  sed  p,  blended  tontrol  n is  end  rs<  i l y a maj  ritj 
f th  : ' . * . iau  f Impr  v \ • ntr  • precis!  n lurin  man*  tv  ring  f ight . Slgnlf i- 

• *ant  improvement  In  alr-t  —a  I r*  tracking  was  >t»t  a ined  du**  t<  Pet  t or  longitudinal  oontr  1 

• hr  tgh  t he  pll  t rs  ibilitj  t pi  :1  • id  just  - . ?ig  ir<  • Illustrates  t hat  itl  M.E. 
active,  the  g response  rsiv  directly  follows  stick  f ive  commands..  The  commands  are 
reduced  In  magnitude  Indicating  tighter  pitch  control  . Improvement  -ire-  evid  ut  hi 
smoother  angle-o  f-at  ,t  ark  response  and  reduced  pit  oh  rat"  response. 


Figure  9 Windup  Turn  Tracking  Input  Command?  and  Response  Comparisons 

0.8M  at  . ’2,000  Feet 


Figure  10  Is  a plot  of  plpper  position  during  the  Handling.  Qualities  During  Tracking 
(HQDT)  task.  All  pilots  found  M.E.  to  improve  their  air-to-air  HQDT  performance . Tic 
gust  alleviation  feature  was  also  found  to  reduce  plpper  upset..  Figure  11  shows  the 
reduction  In  gust  response  during  low-level  operations.  For  air-to-ground  tasks  M.F. 
was  also  identified  as  a benefit  duo  to  quickening  of  the  pull-up  recovery. 

The  gain/response  of  M.E.  did  not  suit  all  pilots.  Over-sensitivity  was  noted  and 
the  uncommanded  gust  alleviation  was  at  times  disconcert  Ing.,  especially  at  low  altitude. 
The  need  for  task  oriented  control  law  tailoring  of  M.E.  was  indicated.  For  example, 
minimum  gust  response  of  a weapon  line  stabilization  (g  and  attitude)  mode  for  air-to-air 
and  air-to-ground  tasks  may  require  different  tailoring  than  for  a low-level  ride  improve- 
ment feature. 

Direct  Lift  and  oldoforve  Modes  - These  manual  control  modes  were  found  to  have  potential 
for  air-to-air  tracking.  Since  flight  path  changes  could  be  made  directly  without  pitch- 
ing or  rol 1 Ing-to-turn , quick  and  precise  responses  were  obtained.  Deadbeat  response  i ? 
obtained  without  objectionable  plpper  transients,  A command  immediately  relocates,  plpper 
position;  remove  the  command  and  the  plpper  remains  where  located.  The  button  median l ca- 
tion allowed  the  pilot  to  f,beep"  direct  force  inputs  for  precise  changes  in  plpper  posi- 
tion. Single  axis  flight  path  correct  Ions  were  easily  acc.vnp  ! I shed . '•Moure  10  lliurtrat. 
the  tracking.  Improvement  one  pilot  achieved  by  using.  Direct  i i ft  and  D!dofore«*. 

Air-to-ground  tasks  showed  significant  payoff  for  the  sldeforco  node.  Since  flight 
path  could  be  irlven  laterally,  directly  to  the  target  (wince  lev!  r!r  g> 


Fxcept  for  beep  Inputs,  the  pilot  a preferred  using  the  rudder  pedals  for  precise 
lateral  inputs.  Again,  a task  oriented  design  is  needed.  .tains  set  for  air-to-air  t isks 
were  too  sensitive  and  larked  the  required  control  precision  for  a l r-t  o-ground  tasks. 

ual  gradients  to  desensitise  small  inputs  are  also  desirable.  Air  data  scheduling  is 
nerded,  particularly  for  high  angle  dive  bomb  deliveries.  The  pilots  projected  payoffs, 
for  Pipeet  lift  and  Bidet’ uve  iti  air  combat  maneuvering  and  for  defensive  tactics.  Force 
levels  of  ^ g were  desired;  however,  the  CVV  YF-lo  capability  was  limited  to  a nominal 
or.--  g level. 

Fuselage  Aiming  Mode:*.  - Rapid  changes  in  plpper  position  were  possible  with  the  Fusel  ago 
Aiming  in. '.hut . However,  manual  implement  at  Ion  of  these  modes  severely  limited  their  prac- 
ticality. Real  utility  may  be  limited  to  automatic  applications  such  as  Integrated  Flight 
Fire  Control  where  a director  fire  control  system  would  provide  t lit  pointing  commands. 
Deficiencies  in  the  test  Implementation  of  tills  mode  were  found  In  control  laws,  control- 
lers and  displays. 

The  proportional  button  controller  on  tin*  sldestlck  controller*  was  Judged  urtsatlsfae- 
t ory . It  was  Impractical  and  unnatural  to  fly  flight  path  with  sldestlck  controller  and 
use  tin*  thumb  to  point  off  from  the  flight  path.  Cross  coupling  of  axis  inputs  also  gave 
poor  response.  In  the  tracking  task,  plpper  positioning  could  be  attained  but  since 
flight  path  was  not  changed  by  these  mode  Inputs,  saturation  of  pointing,  ability  was 
rapidly  reached  and  plpper  position  lost.  A HUP  presentation  showing  velocity  vector 
and  pointing  authority  may  be  required.  Also,  closed  loop  median l sat  Ion  where  a "trim 
follower"  corrects,  flight  path  to  t lie  weapon  line  could  be  useful.  Additionally,  integral 
"beep"  type  pointing  control  Inputs  are  desired. 

Another  problem  was  authority  mismatch.  lateral  pointing,  capability  was  about  ioO 
mils  and  longitudinal  mils.  Equalising  authorities  and  desensitising  inputs  could 
improve  t he  manual  use  of  these  modes. 

One  useful  application  of  pitch  pointing  was  In  air-to-ground  straffing.  By  point ing 
nose-down,  minimum  altitude  could  be  raised,  achieving  the  straffing  solution  at  lf00-r>0d 
fee t as  compart'd  tv-'  OSO  feet  with  the  baseline  system. 

Trans  1 at  Ion  Mode:*.  - The  Vertical  and  Lateral  Translation  modes  were  found  suitable  for 
small  position  changes  during  format  loti  flight,  and  for  crosswind  drift  correct  Ion  and 
matching  ground  target  mot  Ion.  Simulated  landing  approaches  showed  a erosswind  trim 
capability  of  IS  knots.  In  a gunnery  pass,  the  translation  capability  was  sufficient 
to  track  targets,  moving  over  SO  knots  normal  to  the  flight  path. 

Deficiencies  were  found  In  the  translation  mode  control  laws  and  controller  design. 

I*he  translation  velocity  buildup  was  too  slow  and  overall  response  time  eharac t er 1st ies 
were  poor.  Translation  Is  achieved  by  an  initial  acceleration  that  washes  out  as  steady 
state  velocity  Is  readied  and  Is  stopped  iti  i reverse  manner;  some  pilots  complained  of  an 
uncomfort ab le  "feel"  to  the  lateral  mode.  Use  of  the  modes  was  restricted  to  small  bank 
angles  (less  than  10°l  and  was  locked  to  a heading  hold.  These  restrict  ions  limited 
useful  application  of  these  modes.  Control  law  changes  and  further  evaluation  is  requirt'd 
Controller  deficiencies  wore  also  found.  Integral  command  inputs  or  a closed  loop  velo- 
city command  system  should  be  evaluated. 

Richter  vVV  v’onc  l us  Ions 

The  Fighter  CVV  program  has  demonstrated  that  uncoupled  rlVF  control  can  be  effect  Ivel 
used  tv’  provide  Innovative  capablllt  ies  and  Improved  mission  effectiveness  of  fighter 
aircraft.  However,  this  program  was  certainly  but  a first  step  in  fully  validating  t he 
capability.  The  design  was  intended  for  a capability  demorist  rat  ion  and  aimed  at  maximum 
capability  within  the  aircraft’s  constraints.  Specific  task  oriental  Ion  was  outside  tin* 
scope  of  tills,  initial  work.  It  was  found  that  the  use  of  the  different  mode's,  sent  roller 
preference,  control  gradients,  mode  authorities  and  dynamic  eharac t er 1st ies  were  highly 
dependent  upon  t lie  specific  task.  Task-t  a l lored  multimode  cent  rol  law  Implementor  ion  and 
selection  capability  Is  clearly  required  in  future  appl  icat  ions.  While  pilots,  quickly 
adapted  to  the  new  control  movies,  continued  work  towards  simplified  swltoholog.v  and  con- 
trollers is.  necessary.  Another  area  of  urgent  need  is  the  development  of  appropriate 
handling  qualities  criteria. 

4.  MULT TMOPK  CONTROL  LAW  DEVELOPMENT 

The  basis  for  consideration  of  mlsslon-t a i loved  or  task  optimised  control  mode  concept 
lies  in  tin'  ability  of  the  FBW  flight  control  system  to  tailor  basic  aircraft  res.pons.t' 
eharact  ertst  Ies  and  flying  qualities  tv'  meet  a wide  range'  of  mission  dependent  requirement 
Figure'  1.'  illustrates  a classical  variation  in  longitudinal  response  eharac  t er  l si  1 cs 
achievable  through  appropriate  tailoring  of  the  flight  cent  rol  laws,  using  tin'  time  domain 
flying  qualities  criteria. 

The  non-crosshat  ched  area  represents  the  boundary  of  acceptable  normalised  longitu- 
dinal response  eharac  ter  1st  ies  (blended  pitch  rate  and  normal  acre  1 erat  i on>  , "ho  dashed 
line  response  (basic  F-4F  with  Stability  Augmentation  System  (BAB^  falls  outside  the 
boundary,  thereby  Indicating  object lonab le  flying  qualities  at  this  flight  condition.  ’.’ho 
sol  id  line  response  (SFCS  Y F-  'i  F. ) on  the  other  hand  lies  well  within  th«-  C*  boundary  and  Is 
achievable  through  appropriate  blending  of  feedback  parameters,  gain  scheduling  and  c.'r:m 
signal  filtering.  It  should  be  noted  that  many  of  the  classical  flying  qualities  para- 
meters are  not  completely  applicable  to  multimode  FBW  systems,  since  the  forced  re. a-. 'use 
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Examination  of  these  data  reveals  significant  reductions  In  tracking  error  for  the  special- 
ized mission-tailored  combat  modes  when  compared  to  the  baseline  PlgiTact  mode,  which 
employed  only  conventionally  optimized  control  laws.  The  baseline  aircraft  configuration 
used  In  this  particular  simulation  study  was  a FBW  YP-ftE  modified  with  differentially 
controlled  horizontal  canards. 

An  example  where  the  multimode  design  approach  offers  unique  advantages,  In  terms  of 
simplicity  and  effectiveness  Is  a modern  high  performance  fighter,  which  Is  designed  ar.1 
optimized  for  an  air  superiority  mission.  Such  a system  generally  dictates  a low  wing 
loading  design  to  achieve  maximum  maneuverability.  Tn  adapting  tills  type  of  vehicle  for 
an  air-to-ground  role,  one  must  consider  the  potentially  adverse  effect  or  low  wing  load- 
ing on  gust  sensitivity  during  low  altitude,  high  speed  operations.  Typically,  air-to- 
ground  tracking  Is  somewhat  compromised  because  the  low  wltig  loading  vehicle  is  more 
sensitive  to  gust  disturbances.  The  closed  loop  maneuver  enhancement  mode  (balanced 
maneuvering  flap  and  horizontal  tall)  currently  Implemented  In  the  COV  YF-lr  offers  the 
potential  for  not  only  improving  air-to-air  tracking  performance  through  tighter  g and 
attitude  control,  (Figures  9 and  10),  but  also  enhances  air-to-ground  tracking  performance 
by  reducing  gust  sensitivity  (Figure  11)  associated  with  a low  wing  loading  design.  In 
a multimode  application,  this  feature  would  be  implemented  within  the  flight  control  com- 
puter, containing  separate  task  optimized  control  laws  for  achieving  desired  weapon  line 
stabilization  characteristics  for  both  air-to-air  and  air-to-ground  operations  and  would 
not  require  extensive  structural  or  aerodynamic  changes/compromises . 
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° Simplified  mission  mode  selection  ("hands  on") 

0 Automated  checklist 

0 Selective  Routine/Emergency  Information  Annunciation 
° Display  redundancy/commonallty 
° Flight  Flan/Mlsslon  Management 

In  a total  mission  context  the  power  of  the  digital  computer  can  bo  brought  to  bear  on 
the  tomplex  tasl  >f  integrating  mission  relevant  tontrols , lisj  nd  vehicle  Jynamlc 

" » jterlstics , In  such  a way  that  thi  pll  t assumes  th  roll  f i mission  manager 

rather  than  i subsystem  ope  rat  r . Irew  stat  ion  Integration  vls-a-vl; il  tirade  tontrol 

laws  and  coordinated  multi-purpose  controls  Mlspl  ays  can  be  a significant  Influencing 
factor  In  achieving  t . t al  uncompremlsed  mission  performance.  Additionally,  this  approach 
facilitates  the  lmpli  natation  of  ther  idvanced  t ;l  i ■ gies,  such  is  irticulating 
(reclined)  high  g seat,  integrated  fire  -out rol  'flight  control  and  st  andarlred  uvlonio 
modules.  Application  of  CCV  features,  such  as  Independent  fuselage  pointing  and  direct 
force  control  represents  a significant  challenge  to  the  pilot  vehicle  Interface  and  as 
such  will  require  Innovative  crew  station  and  control  system  design  approaches  to  fully 
"xplolt  this  added  capability. 

6.  SYSTEM  IMPLEMENTATION  CONSIDERATIONS 

Digital  implementation  of  sophisticated  multimode  control  laws  !s  an  al  tractive 
approach  based  on  the  Inherent  advantages  delineated  In  Section  1.  As  with  any  full 
authority  FRW  design  approach,  there  are  a number  of  critically  Important  iesl.-ri  o nsld- 
• rat  Ions  which  must,  be  address-  d In  order  to  satisfy  not  only  system  performance  require- 
ments, but  also  to  establish  a high  degree  of  system  Integrity. 
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To  a large  extent,  the  level  of  redundancy  require^)  to  satisfy  a specified  mission 
reliability  requirement  (typically  on  the  order  of  10"  catastrophic  failures  per  fllgh' 
hour)  Is  dependent  on  the  type  of  failure  monitoring  scheme  (ln-llne  and/or  cross-channel 
comparison),  component  failure  probabilities,  desired  fall-operational  capability  and 
overall  confidence  In  achieving  the  desired  reliability.  Existing  full-authority  three- 
axis  analog  FBW  mechanizations  employ  quadruplex  redundancy  to  achieve  the  desired  mission 
reliability;  however,  with  digital  Implementation  schemes  It  Is  feasible  to  consider 
triply  redundant  systems  which  can  be  mechanized  to  confidently  satisfy  mission  reliability 
requirements.  Reduction  In  the  level  of  redundancy  not  only  reduces  overall  system  com- 
plexity, but  also  has  an  appreciable  Impact  on  weight  and  volume  savings,  along  with 
reduced  acquisition  and  life  cycle  costs.  From  a design  standpoint  and  based  on  state- 
of-the-art  In  electronics,  redundancy  management  and  Implementation  schemes  can  have  the 
largest  single  impact  on  overall  Integrity,  reliability  and  cost  of  ownership  of  a FBW 
system. 

In  a triplex  digital  mechanization  adequate  second  fault  coverage  Is  the  primary  con- 
cern. Probability  of  first  fault  coverage  Is  essentially  1.0  using  cross  channel  compar- 
ison monitoring.  Coverage  in  this  case  Is  defined  as  the  probability  of  detecting, 
isolating  and  recovering  from  an  internal  system  failure.  Typical  second  fault  coverage 
and  failure  rates  for  critical  system  elements  are  shown  in  Figure  17. 
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Figure  17  Second  Fault  Coverage  (X2)  in  a Triplex  System 


Figure  18  illustrates  the  relationship  between  second  fault  coverage,  single  channel 
failure  rate  and  mission  reliability,  i.e.,  probability  of  loss  of  control.  From  these 
figures  it  is  evident  that  one  can  achieve  an  overall  mission  reliability  of  10“’  failures 
per  operating  hour  for  a triplex  digital  system,  which  has  a second  fault  coverage  of  at 
least  •91,1l  and  single  channel  failure  rate  not  exceeding  800  x 10-b  failures  per  hour. 

A group  of  generic  quadruplex  and  triplex  systems  are  compared  in  Figure  19.  Quadru- 
plex system  Q-l  has  a third  fault  coverage  of  0.95.  Achieving  this  level  of  coverage 
requires  the  same  In-line  monitoring  techniques  used  in  the  triplex  system.  System  Q-2 , 
on  the  other  hand,  requires  only  a simple  "heads-or-tails"  test  for  third  fault  coverage. 
Triplex  system  T-l  has  a second  fault  coverage  of  0.95  which  is  conservative  and  readily 
achievable  with  known  in-line  monitoring  techniques.  It  is  theoretically  possible  to 
achieve  a second-fault  coverage  of  0.99  and  the  probability  of  loss  of  control  shown  by 
T-2.  For  any  triplex  system  to  have  as  low  a probability  of  loss  of  control  as  quadruplex 
system  Q-2  requires  a second  fault  coverage  of  0.9996  (system  T-3)  which  Is  extremely 
unlikely.  Based  on  studies  and  analyses  conducted  to  date,  It  is  considered  feasible  to 
achieve  satisfactory  mission  reliability  (10“")  with  a triplex  digital  configuration 
employing  a combination  of  cross  channel  comparison  and  in-line  monitoring  schemes. 

Software 


The  need  for  effective  software  management  cannot  be  overemphasized.  Experience 
Indicates  that  software  can  be  a major  source  of  problems  In  the  development  and  operation 
of  digital  systems.  Adequate  software  planning  during  the  initial  system  definition  phase 
is  essential.  As  a minimum,  the  plan  should  address  design  specifications,  system  inter- 
faces, configuration  control,  documentation  procedures,  modular  coding  and  testing,  support 
software,  module  Integration,  hardware  and  software  Integration  and  verification. 
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Figur-'  19  'omparison  of  Quadruple x and  Triplex  System  Reliabilities 


Software  development  f ->r  digital  flight  control  system  applications  must  consider  at 
i • •'  ir  maj  r elements,  !.•>.,  Executive,  Redundancy  Management,  Bullt-ln-Test  (BIT) 
in!  ’ontrol  Laws.  Comparison  of  estimated  total  memory  requirements  for  triplex  and 
juadruplex  - nflguratl  ns  >f  a 3-axls  mission-tailored  multimodi  flight  control  sys  eit 
[s  shewn  in  Table  1, 

The  executive  software  provides  the  main  skeleton  into  which  other  software  elements 
tr-  Ini'  -rated.  It  provides  the  synchronisation,  computational  rate  structure  and  redun- 
i a: -ottf iourat  loti  of  the  software,  in  the  event  the  fault  monitoring  and 'or  BIT  routine 
lndi  ite  a failure.  The  size  will  vary  lependlng  n the  particular  processor , control 
log!  ’ and  input/output  mechart i r:at  ton  ttseti.  The  executive  function  also  provides  the 


Category 

Memory 

Triplex 

Quadruplex 

Control  Laws 

6,000 

6,000 

BIT 

2,000 

3.270 

Redundancy  Management 

3,350 

3,400 

Executive 

3,990 

3,840 

Total 

— 

15,340 

16,510 

Table  1 

Total  Memory  Required  for  Flight  Control  Computers 


proper  management  and  interface  with  other  subsystems  such  as  displays,  air  data,  fire 
control  system,  un  : navigation. 

Redundancy  management  provides  the  necessary  fault  detection,  isolation  and  recovery 
logic  to  satisfy  overall  system  reliability  and  fall-operational  requirements.  Signal 
selection  algorithms  and  fault  recovery  strategies  are  key  elements  In  the  design  of  a 
fault  tolerar;*  flight  control  system.  Achieving  .95  second  fault  coverage  with  a triplex 
configurat ! n requires  application  of  both  cross-channel  monitoring  and  in-line  monitor- 
ing techniques.  t.her  more  advanced  concepts  which  could  be  considered  are  analytical 
redundancy  and  reconfiguration. 

Functional  implementation  must  address  the  following  fundamental  considerations: 

Cross  Channel  Mnitorlng 

0 N .mber  of  Voting  Planes 

° Sensor  and  Controller  Inputs  to  Computer 
° Intermediate  Computed  Parameter 
° Computer  Outputs  to  Actuators 
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° A P Comparison 

° Redundant  Data  Comparison  and  Voting 

0 Signal  Selection 
° Averaging 

° Computer  Synchronization 

0 Bit  by  Bit 
0 Frame 

0 Comparison  of  Intermediate  Computational  Results 
° Asynchronous 

0 Computer  Interchange  of  Redundant  Data 
In-Line  Monitoring 

° Computer  Self-Test 

0 Computer  Test  of  Sensors  and  Controllers 

° Data  Reasonableness 
° Torquers 
° Dither 

0 Computer  Test  of  Actuators 
0 Actuator  Models 

° Computer  Test  of  I/O  and  Multiplex 


0 Parity 
° Wraparound 
0 Rebound 
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° Pat- a Rt'a.’xuiah  1 eness 


.do  ft  ware  design,  progr  ammlng  standard:.,  verification  and  ••ait  !•••  I | r - -•••dure;*  mart  : 
sufflc  lent  t o assure  that  no  catastrophic  single  failure  points  «- x I : * ♦ • A case  In  | In1 
la  the  addition  of  multiple  voting  planes.  Inolusl  >n  d'  voting  | Ian-,  la  mi*1  f th«-  wa\ 

by  which  a redundant  flight  e.  :d  r >1  ay  at.  fin  la  made  fault  to  l • • rant  . Thr  rot  I • « 1 1 y , t I • • 

more  voting  planes,  the  more  fault  t.olerant  the  ayat  «*m.  When  tin-  sy:  ’ «m  !.•  ini'.  g,  t h< 
addition  of  voting  planes,  over  and  above  what  if  - in-*- i « • 1 i.  achieve  the  re  pa  l re  i 
reliability,  are  coat  Ly  due  to  the  signal  buffering  r> ■■  i u 1 1 t . pi'evnt.  fault  jr  a a.  i’!  a 

between  channels  and  the  additional  dedicated  malog  voter-.  With  a ttgl’nl  • ” : it.  r , 
the  buffering,  and  oross-ehaimo  l data  transfer  tr<-  readily  f a c l 1 1 1 a t *•  1 , md  the  :•  vv 
ware  vot  1 ng  algorithm  can  be  used  to  vote-  on  many  different  signals.  • ** »n • • pioj.t  .,  •••  • 
la  a temptation  to  consider  using  many  voting  piano.;,  t lner-  is*  fault  t 1-  • • m ••  and 
Improve  syst  em  reliability.  On  the  other  •' , Ini  *,i,«,<»ni»oei  ! on..  J ot  w-  n • '.and  • n itc.o  1 . 

required  to  Implement  a large  number  of  vot  I up  plane:-,  t • • r ; d . • ’ 1:.  -:•«■!  • t : ’ -nt  ! i !'•  r 

common  mode  failures.  For  this  reason.  It  l lesl  ruble  tha'  v tine  ; I n '•  ••  11:1'  i ' 

planes  B,  C and  K as  shown  In  Figure  .‘0 . In  this  manner  data  • r>  . •*  r n plug  I.  • nJ'lacd 

to  a single  digital  data  exchange  bus.,  which  ••an  bo  properly  t iff-  r<  1 o I :•  tilt.  • i . • 

general,  I nt  erconnec  t 1 ons  between  redundant  ch.nnne  1 s should  :••.  In!  n 1 1 t limit  • • .• 

potent  lal  for  propagat 1 ng  system  failures.  ■■  *.  nr*.  is  • • !;•  v ' It.  - } 1 e 

must  be  an  ffle  lent  ly  t.  Ight  to  limit  excess  I ve  sw  1 t chi  ng  t rans  1 ••nt  s bat  .s  l . 

to  avoid  frequent,  nuisance  disconnects. 


One  of  the  major  advantages  of  a digital  architecture  Is  the  ability  t icc.'mm. ' d *.  t * 
extensive  self-test  feat  tires,  required  for  Implementing  tillable  In-line  men  1 1 fins  ••!•..•••. 
After  one  failure  In  a triplex  system  and  two  failures  In  a piadruplex  system,  1 ti—  l 1 n • 
monitoring  must  be  used  to  resolve  any  channel  differences.  If  the  flight  control  s-.vs.t-- 
Is  to  eont  Inue  to  operate.  When  In-line  monitoring  Is  used,  the  computer  must  first 
It.self;  then  It  Is  In  a condition  to  chock  other  system  elements.  ;ie|  f-t  s.-.t  1 . »g  -f  die  I'l  i 
computers  Involves  a mix  of  hardware  and  soft-war*'.  Pertain  basic  perl  Ions.  f the  'omptit  . r 
must  be  operable  before  any  self-test  l ng  can  be  conducted,  . ...  v.  - 

Fallufo  of  t !)••;-..  basic  port  Ions  must  be  detected  by  hardware.  With  those  has!--  ; s’  1 
of  the  computer  operating,  self-testing  of  t ho  computer  can  begin.  The  design  *f  : Is 
self-test  program  Is  base*i  on  the  inverted  pyramid  t est  phi  los.qdiy . That  Is.,  • !.••  p;-o  •••  ,•• 
first  tests  the  Instructions  that  require  a minimum  of  logic  fa-  their  execution,  md  tic- 
memory  locations  that,  contain  the  self-tost  program.  These  verified  Insdruct  1 • md 
memory  local  Ions  are  then  used  to  test  Instruct  Ions  and  memory  on  the  next  1 1 1 • - 1 :•  * * • :•  v 
Tl»ls  process  Is  continued  until  all  of  the  1 nr.  t ructions , memory  and  1 »'  have  been  v.flfl  1. 

Built-- In-Test  (BIT)  as  distinguished  from  In-Fl tght  Monitoring  ( IFM>  and  Its.  ■ • la*  - d 
self-test  features  Is  a term  used  to  describe  a sequence  of  Internal  software  .suit  !•••  : • -d 
tests  conducted  on  the  ground , to  validate  system  Integrity  and  'or  trait'  ho  t t ho  1 
flight  control  system.  It  Is  generally  desirable  to  Incorporate  two  lev.  is.  of  BIT, 
to  be  used  for  pre-flight,  checkout  and  the  other  for  organlc.at  tonal  maintenance  ; ar;  • 
without  the  need  for  specialised  external  test  equipment  and  or  highly  skilled  technic  <: 
personn*1 1 . Imp  1 ement  l ng  BTT  and  TFM  functions  will  require  basic  decisions,  rorardlno 
liardware  vs.,  soft  ware  mechanisation.  Implements!  ion  of  monitoring  las.ks  In  hardware  rat  T-r 
than  software  generally  results  in  a higher*  channel  failure  rate  due  to  the  added  plec. 
part  count.  For  this,  reason,  soft  war*'  monitors  should  be  used  where  performance  can  b< 
met. . 

The  variation  in  control  laws  needed  t o establish  a full-up  miss  lon-t  a l lered  ’milt  Irsl'- 
cent  roi  system,  Incorporat.  1 ng  (W  feat  ur*'«  requires  sophl  st  ! cated  Inner  loop  funotlen.-  t 
p ro v 1 de  the  necessary  mod*'  switching  logle,  feedback  blending,  signal  shaping,  'ulu 
schedule:;,  filters,  compensat  ion  network.;,  *'lc.  The  simplified  lat  era  l -d  l sect  I ena  1 axl; 
block  diagram  of  Figure  fl  Illustrates  an  example  of  the  level  of  switching  required  ’ 
alter  the  basic  Normal  mod*’  to  a specialised  Air  I’ombM  mode. 
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Figure  21  Air-to-Air  Combat  Mode  Lateral-Directional  Axes  Block  Diagram 


Implementat ion  of  multimode  functions  places  tremendous  demands  on  the  computational 
elements  of  the  flight  control  system  and  is  a major  factor  in  driving  the  technology 
towards  a digital  mechanization.  In  mechanizing  these  multimode  control  laws,  one  must 
consider  two  fundamentally  different  design  approaches.  The  first  approach  and  perhaps 
the  most  widely  accepted  is  digitization  of  continuous  analog  transfer  functions.  This 
approach  uses  a transformation  method  which  transforms  the  continuous  filters  (analog) 
that  comprise  the  control  laws  into  difference  equations  which  are  solved  by  the  digital 
computer.  The  resulting  difference  equation  mimics  the  continuous  filter  in  the  frequency 
domain.  The  quality  of  the  digital  transformation  is  judged  on  the  ability  to  match  the 
analog  filter  without  consideration  of  the  original  performance  specification.  The  second 
approach,  direct  digital  design,  presumably  overcomes  this  restriction  by  allowing  direct 
digital  synthesis  in  either  the  W or  Z planes.  The  issue  of  direct  digital  design  versus 
the  transformation  approach  tends  to  be  somewhat  of  a moot  point,  since  any  Z transfer 
function  has  an  analog  counterpart  for  a given  conversion  technique.  Given  sufficient 
understanding  of  the  distortion  produced  by  a particular  conversion,  proper  adjustments 
in  the  analog  form  can  be  made  for  compensation.  In  most  cases,  either  technique  can 
provide  a satisfactory  digital  implementation  with  little  effect  on  required  computer 
resources . 

Computational  Element 

Digital  computers  must  be  selected  with  sufficient  instruction  repertoire,  throughput, 
memory  an  1 Input/output  provisions  to  accommodate  sophisticated  inner-loop  multimode  con- 
trol laws  and  also  provide  adequate  dynamic  performance  in  the  control  system  frequency 
range.  Of  particular  concern  are  the  effects  of  aliasing  and  output  granularity  in  rela- 
tionship to  system  iteration  rates.  Another  somewhat  controversial  area  in  the  design  of 
digital  flight  control  systems  is  the  need  for  synchronous  versus  asynchronous  operation 
of  redundant  digital  computers.  Frame  synchronization  is  desirable  for  a number  of  reasons. 
First,  near  time  identical  samples  of  redundant  sensor  signals  can  be  taken,  processed, 
equalized,  voted  and  a common  signal  selected  for  use  in  subsequent  computations  in  all 
computers,  thereby  minimizing  tracking  errors,  preventing  channel  divergence,  and  facili- 
tating the  detection  of  failed  computers  and  sensors.  Additionally,  near  simultaneous 
mode  selection  can  occur  in  all  computers.  Asynchronous  operation  on  the  other  hand  also 
offers  some  unique  advantages  by  simplifying  the  computer/sensor  interface  and  eliminating 
the  need  for  synchronizing  algorithms  and  highly  reliable  external  clocks.  This  approach 
also  minimizes  the  possibility  of  introducing  single  failure  point  failures,  however, 
disadvantages  of  asynchronous  operation  are  significant.  Specifically,  large  time  skews 
in  sensor  data  sampling  can  occur,  which  could  result  in  an  unacceptable  balance  between 
large  disengage  transients  and  frequent  nuisance  disconnects.  Another  drawback  is  the 
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SUMMARY 


In  a dive-toss,  air-to-ground  weapon  delivery,  the  pilot  steers  a target  marker  symbol  or  sight 
reticle  (pipper)  so  as  to  overlay  the  target  with  that  symbol.  He  then  depresses  a target  designation 
(pickle)  switch  which  commands  the  computer  to  record  all  available  target  sensor  data.  From  these 
data  the  weapon  delivery  computer  first  calculates  the  location  of  the  target  and  then  generates  steering 
signals  to  guide  the  pilot  in  steering  the  calculated  weapon  impact  point  onto  the  target  whereupon  the 
computer  automatically  issues  the  weapon  release  signal. 

This  paper  contains  an  analysis  of  the  motion  of  the  calculated  impact  point  during  a banked  pullup 
or  climbing  turn.  The  objective  of  this  analysis  is  to  determine  the  path  followed  by  the  calculated 
impact  point  during  such  a maneuver.  Placement  of  the  sight  reticle  along  this  path  allows  the  pilot  to 
pull  straight  back  on  the  stick  after  designating  the  target  without  first  unrolling  to  a wings  level  attitude. 

NOMENCLATURE 


AKT  Normal  acceleration  of  the  aircraft 

N 

CCIP  Continuously  computed  impact  point,  same  as  manual  release 

CCRP  Continuously  computed  release  point,  same  as  automatic  or  dive-toss  release 

F The  dimensionless  quantity,  sin  6 cos  y (tan  y + ctn  y^) 

g Gravitational  acceleration 

HUD  Head  up  display 

R^  Ballistic  range  of  the  weapon 

t^  Time-of-fall  (release  to  impact) 

tpR  Parameter  nominally  equal  to  2.5  sec  for  dive-toss  and  level  laydown  deliveries  and  equal  to 
zero  for  CCIP  deliveries 


T 


R 


V 


x 


V 

y 


v 

z 


zl 


Bomb  trail 

Down  track  component  of  weapon  velocity  at  release  or  computed  release  point 
Cross  track  component  of  weapon  velocity  at  release  or  computed  release  point 
Downward  component  of  weapon  velocity  at  release  or  computed  release  point 
Downward  component  of  weapon  velocity  at  (computed)  impact 


X-Y-Z  Down  track,  cross  track,  and  downward,  respectively;  a right-handed,  earth-fixed,  Cartesian 
coordinate  set;  the  X-axis  is  parallel  to  the  aircraft’s  ground  velocity  at  the  target  designation 
time;  the  Y-axis  is  positive  to  the  right  facing  down  track 


X Down  track  position  coordinate  of  weapon  at  (computed)  release 


Xj  Down  track  position  coordinate  of  the  (computed)  impact  point 

Y Cross  track  position  coordinate  of  weapon  at  (computed)  release 


Yj  Cross  track  position  coordinate  of  the  (computed)  impact  point 

Z Altitude  of  weapon  above  target  at  (computed)  release 


y Weapon  flight  path  angle,  the  angle  between  the  weapon's  velocity  vector  and  the  horizontal 

plane  (positive  in  a dive),  at  the  (computed)  release  point. 


Yj  Flight  path  angle  of  weapon  at  (computed)  impact 


f 

j 


b 


tf-J- 

0 


Drift  angle,  the  angle  between  the  X-axis  and  the  horizontal  component  of  the  weapon's  airspeed 
vector  at  (computed)  release. 

Angle  between  the  horizontal  plane  and  the  line  - of- sight  to  the  computed  impact  point 


0 


T 


Angle  between  the  line -of- sight  to  the  computed  impact  point  and  the  line  - of- sight  through  tin- 
target  marker  symbol  at  or  before  target  designation 


»J>  Aircraft  roll  angle  (positive  with  right  wing  down) 

Projection  onto  the  sight  plane  of  the  angle  between  the  X-axis  and  the  direction  of  motion  of  the 
computed  impact  point 

(*)  Time  derivative  of  the  quantity  ( ). 


I.  IMKODUIION 

Most  computerized  air-to-ground  weapon  delivery  systems  have  at  least  two  delivery  modes.  One 
is  manual  release  or  continuously  computed  impact  point  (CCTP)  mode.  Ihe  other  is  an  automatic 
release  mode,  also  referred  to  as  dive-toss  or  continuously  computed  release  point  (CC'Kl’I. 

In  the  manual  or  COP  mode,  the  computer  displays  the  resulting  impact  point  if  weapon  release 
were  to  occur  at  the  present  time.  The  pilot  steers  tin*  aircraft  so  as  to  overlay  the  target  with  this 
impact  point  symbol.  He  then  depresses  the  weapon  release  button  which  manually  triggers  the  weapon 
release. 


In  the  dive-toss  or  automatic  mode,  the  computer  displays  a target  marker  symbol  (pipper)  which 
is  elevated  above  the  computed  impact  point.  This  elevation  or  lead  angle  is  necessary  so  that  the  target 
marker  symbol  will  pass  the  target  in  advance  of  the  release  time.  I he  pilot  steers  the  aircraft  so  as  to 
overlay  the  target  with  the  pipper  and  then  depresses  a target  designation"  or  pickle’  switch.  This 
action  signals  the  computer  to  record  all  available  target  sensor  information  such  as  the  line -of-sight 
azimuth  and  depression  angles,  slant  **ange,  anti  altitude.  From  these  data  the  computer  calculates  tin- 
target  location  and  generates  steering  signals  which  direct  the  pilot  to  steer  the  computed  impact  point 
toward  the  target.  As  the  computed  impact  point  crosses  the  computed  target  position,  tin*  computer 
automatically  issues  a weapon  release  signal. 

The  term  "dive-toss"  as  applied  to  this  delivery  mode  comes  about  because  the  pilot,  after  pickling 
(designating)  the  target  in  a dive,  usually  pulls  hack  hard  on  the  control  stick  to  initiate  a high  g pullup. 

By  this  pullup  maneuver  the  pilot  gets  rid  of  the  bomb  as  soon  as  possible.  He  can  then  initiate  evasive 
action  to  avoid  antiaircraft  fire. 

The  subject  of  this  paper  is  the  proper  placement  of  the  target  marker  symbol  (pipper)  prior  to 
target  designation  (pickle).  If  the  pipper  position  is  short  of  the  computed  impact  point  (negative  lead 
angle),  the  aircraft  would  already  be  past  the  release  point  when  tin*  pilot  designated  the  target.  On  tin- 
other  hand,  if  the  pipper  position  is  above  the  horizon,  the  pilot  cannot  position  it  over  the  target,  which 
is  presumably  on  the  ground.  By  this  line  of  reasoning,  tin*  weapon  delivery  system  must  position  the 
target  marker  somewhere  between  the  impact  point  and  the  horizon,  but  where  is  the  best  place  to  put  it 
within  these  limits? 

Some  currently  operational  weapon  delivery  systems  set  tin*  elevation  coordinate  of  the  target  mar- 
ker to  zero  depression.  Others  match  the  depression  angle  of  the  target  marker  to  that  of  the  aircraft's 
velocity  vector.  As  for  tin*  azimuth  coordinate,  most  of  these  current  systems  employ  a drift  stabilized 
sight.  That  is,  the  target  marker  symbol  lies  in  the  azimuthal  plane  of  the  aircraft's  ground  velocity 
vector. 

The  effect  of  drift  stabilizing  the  sight  is  to  place  the  target  marker  symbol  in  the  path  of  the  com- 
puted impact  point  (neglecting  cross  trail)  provided  the  aircraft's  ground  velocity  does  not  change  direction 
between  pickle  and  release.  In  other  words,  tin*  steering  signals  generated  by  the  computer,  after  tin- 
pilot  designates  the  target,  will  call  for  wings  level  flight.  llu-  pilot  can  still  pull  up,  but  he  must  do  so 
with  wings  level. 

Because  the  pilot  is  usually  working  very  hard  to  steer  the  target  marker  symbol  over  the  target, 
the  aircraft  is  often  in  a hank  at  the  time  of  pickle.  In  such  a case  the  pilot  must  first  unroll  to  a wings 
level  attitude  before  initiating  his  pullup  maneuver.  I lie  natural  tendency  of  pilots,  however,  is  to  pull 
straight  back  on  the  stick  after  pickling  the  target,  ignoring  the  wings  level  steering  commands. 

The  cause  of  this  mismatch  between  system  operation  and  the  pilot's  instinctive  reaction  is  the  sys 
tern  design  decision  to  drift  stabilize  the  sight.  I he  system  designer  can  achieve  a better  match  between 
pilot  and  system  by  having  the  system  anticipate  the  wings  nonlevel  pullup  and  position  the  target  marker 
accordingly.  Such  anticipation  is  achievable,  for  example,  bv  positioning  the  target  marker  to  the  left  ot 
the  .aircraft  velocity  vector,  when  the  aircraft  is  in  a bank  to  the  left,  and  to  the  right  of  the  aircraft 
velocity  vector,  when  the  aircraft  is  in  a hank  to  the  right. 
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The  left- right  displacement  of  the  target  marker  as  a function  of  roll  angle  provides  an  auxiliary 
benefit  which  may  prove  to  be  more  significant  than  the  elimination  of  the  wings  level  pullup  requirement. 
This  feature  gives  the  pilot  direct  control  of  the  left-right  motion  of  the  target  symbol.  He  simply  has 
to  roll  the  aircraft  left  or  right.  The  sight  pipper  moves  accordingly,  and  the  response  is  immediate. 
This  greatly  simplifies  the  pilot's  task  of  steering  the  target  marker  onto  the  target,  and  hence  will 
result  in  better  aiming  (closer  coincidence  of  target  and  target  marker  symbol  at  pickle)  by  the  pilot  and 
more  accurate  weapon  deliveries. 


/*' 


To  better  appreciate  the  advantage  of  this  direct  control  of  the  sight  reticle,  consider  the  aiming 
task  of  the  pilot  when  using  the  drift  stabilized  sight.  In  this  case,  the  pilot  must  move  the  velocity 
vector  of  the  aircraft  in  order  to  move  the  target  marker.  The  velocity  vector,  however,  is  one  integral 
removed,  in  a dynamic  sense,  from  the  attitude  of  the  aircraft,  which  is  what  the  pilot  controls.  Conse- 
quently, the  velocity  vector  and  the  target  marker  lag  the  pilot's  control  actions,  and  it  takes  a consider- 
able degree  of  pilot  skill  and  training  to  steer  the  target  marker  into  coincidence  with  the  target. 


The  foregoing  discussion  establishes  the  desirability  of  having  the  target  marker  symbol,  in  a 
dive-toss  weapon  delivery  mode,  move  laterally  across  the  sight  in  response  to  the  roll  attitude  of  the 
delivery  aircraft.  The  principle  objective  of  this  paper  is  to  determine  the  proper  amount  of  sight  pipper 
displacement  as  a function  of  the  aircraft's  roll  angle.  The  next  section  attacks  this  problem  by  analyzing 
the  motion  of  the  impact  point  during  a constant  bank  angle,  turning  pullup.  Placement  of  the  pipper 
along  this  line  will  achieve  the  desired  result.  Namely,  it  will  permit  the  pilot  to  pickle  the  target  and 
pull  straight  back  on  the  stick  without  changing  his  bank  angle. 


II.  ANALYSIS  OF  IMPACT  MOTION 


The  first  objective  of  the  analysis  is  to  determine  the  relationship  between  aircraft  acceleration 
and  the  apparent  motion  of  the  impact  point  on  the  sight  or  HUD  against  the  target  background.  Equation 
(1)  is  the  general  impact  equation  which  expresses  the  position  (Xj,  Yj)  of  the  bomb's  impact  point  in 

terms  of  the  position  (X,  Y)  and  ground  velocity  (V  , V ) of  the  bomb  at  release. 
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where  tf  is  the  time-of-fall,  Tr  is  the  bomb  trail,  and  6 is  the  drift  angle. 


The  analytical  procedure  wUl  be  to  differentiate  Eq.  (1)  with  respect  to  time  to  obtain  a relationship 
between  the  impact  point  motion,  Xj  and  Yj,  and  the  aircraft  acceleration.  It  will  gi  eatly  simplify  the 
analysis  to  neglect  the  Tr  terms,  in  effect  restricting  the  analysis  to  the  zero  drag  case.  This  is  not  so 
restrictive  as  it  might  seem  at  first,  because  the  dive-toss  mode  is  usually  employed  with  low  drag  bombs 
anyway,  and  such  bombs  approximate  a zero  drag  bomb  reasonably  well.  Furthermore,  the  purpose  of 
this  analysis  is  to  determine  the  most  convenient  placement  of  the  target  designating  pipper.  If,  due  to 
approximations  in  the  analysis,  the  pipper  location  is  not  quite  in  line  with  the  impact  point  motion  as 
the  pilot  pulls  up,  the  computer  will  command  a small  compensatory  steering  correction.  If  the  pilot 
follows  this  steering  command  he  will  avoid  the  bombing  error  which  otherwise  would  have  occurred. 


Neglecting  Tr  in  Eq.  (1)  based  on  the  foregoing  rationale,  we  proceed  to  differentiate  Eq.  (1)  with 


respect  to  time  as  follows. 


X = V 1 V t + V t ) 
I x X f x f ( 
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Y = V t V 
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By  definition,  the  cross  track  velocity  V is  zero  at  the  target  designation  point.  At  this  time. 


therefore,  Eq.  (21  reduces  to 


X = V + V t.  + V t , 

I X X f X f 


Y.  ■ Vf 


(down  track) 
(cross  track)  ^ 


(3) 


Equation  (1)  shows  us  that,  at  target  designation  time,  the  cross  track  velocity  of  the  computed 
impact  point  is  directly  proportional  to  cross  track  acceleration  with  tf  being  the  constant  of  proportion- 
ality. Furthe r reduction  of  the  along  track  impact  motion  equation  requires  an  expression  for  t f.  For 
the  zero  drag  bomb  approximation,  the  time-of-fall  is  a function  only  of  altitude  above  target  and  vertical 
velocity.  Hence, 


‘f  = 77 


(4> 


The  partial  derivatives 
follows. 


‘ tf/  • \ 7,  can  be  expressed  analytically  (for  a zero  drag  bomb)  as 


i 


I lee l run  Devices  (TI  Ps) , losephson 


>""*  A"enid“  FU1J  mect  TranBlHt0:  (™fTV  1-,*<‘;',7gI;'n(PK(:U.  These  .eehnolog.es  will  off. 

Is  almost  an  order  to  magnitude  better  than 
ii  1.1  .main  he  a central  processor.  The 


Coup  1 1 


Junction  logic  and  Dielectrically  Isolated  Kail  ter 
subnanosecond  propagat Ion  delays  and  with  the  potential  o! 


sp.- 


//-  / 


V ' , f 2b' 


fv*)  * 


where  V ,j  V / 4 gtj- 


^ . + -g*7  . Substituting  Kqs.  (5)  and  (61  into  Kq.  (-4)  gives  us 


v,  ' V 


In  .i  constant  speed,  coordinated  maneuver  the  along  track,  cross  track,  and  vertical  accelerations 
are  all  related  to  the  aircraft’s  normal  acceleration,  A , as  follows. 

V cos  <»  sin  y 

V = A sin  o (S) 

y N 

\ -A^.  cos  cos  y * g 


Substitution  of  Kqs.  (7t  and  (H)  into  Kq.  ())  and  use  of  tin*  identity,  V ) gt  V , yields 
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where  ctn  yj  \’x  \ and  represents  the  slope  of  the  (computed)  impact  trajectory  with  respect  to  the 
vertical. 

The  apparent  down  track  motion  Xj  in  the  plane  of  the  sight  will  appear  to  he  foreshortened  by  the 
sine  of  the  depression  angle  6 to  the  (computed)  impact  point.  Hence  the  tangent  of  the  direction  of 
apparent  motion  of  the  impact  point  in  the  sight  plane  is 


Xj  sin  0 


where  F sin  0 cos  y (tan  y ) ctn  y^l. 


If  the  quantity  F in  the  denominator  of  Kq.  (10)  were  equal  to  unity,  then  tan  would  equal  tan  »!', 
and  the  apparent  motion  of  the  impact  point  would  be  "straight  up  the  sight,  parallel  to  the  ordinate  or 
normal  axis  of  the  sight.  Actually,  the  quantity  F is  always  less  than  unity  (see  Appendix  A for  proof)  for 
any  dive  angle  less  than  00  degrees.  Because  F is  less  than  unity,  Kq.  (10)  tells  us  that  the  angle  will 
be  greater  than  the  angle  A.  This  means  that  the  impact  point  will  track  off  at  an  angle  slightly  to  tin* 
right  of  the  sight's  ordinate  axis  in  a right  hand  bank  or  slightly  to  the  left  of  that  axis  in  a left-hand  bank. 
Equation  (11)  expresses  the  amount  of  this  angular  deviation  mathematically. 


tan  (it>j  - 
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I'sing  Kq.  (10)  to  eliminate  tan  from  the  right-hand  side  of  Kq.  (11),  we  have 
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Figure  3.  Sight  Geometry  in  a .10  Degree  Roll 

From  this  computed  impact  point,  displace  the  target  marker  symbol  up  the  sight  (parallel  to  the 
sight  ordinate  axis)  by  an  amount  P >p  (to  be  determined  shortly)  and  to  the  right  (parallel  to  the  sight 
abscissa  axis)  by  an  amount  0^  tan  (^j  - <t>).  This  places  the  target  marker  symbol  approximately  in  line 
with  the  track  of  the  computed  impact  point  if  the  pilot  pulls  straight  back  on  the  stick  without  unrolling. 

III.  ANGULAR  DISPLACEMENT  BETWEEN  COMPUTED  IMPACT  POINT  AND  I ARC.ET  MARKER 

The  last  question  to  be  resolved  is,  "llow  large  should  we  make  t)j?  The  choice  of  O p is  some- 
what arbitrary,  because  it,  together  with  the  magnitude  of  the  pull  up  acceleration,  merely  determines 
the  time  between  pickle  and  release.  Most  pilots  prefer  to  make  this  time  as  short  as  possible  so  that 
they  can  get  rid  of  the  bomb  and  begin  their  evasive  escape  maneuver  as  soon  as  possible.  However,  it 
still  has  to  be  long  enough  to  allow  time  for  making  at  least  small  steering  corrections. 

The  only  absolutely  necessary  constraints  on  t?  -p  are  that  it  be  neither  negative  nor  so  large  as  to 
point  the  target  designating  pipper  at  or  above  the  horizon.  If  0 -p  were  negative,  the  release  point  would 
already  be  passed  when  the  pilot  pickles  the  target.  If  the  pipper  is  above  the  horizon,  the  pilot  can  not 
place  the  pipper  on  the  target.  One  way  to  insure  that  the  pipper  will  always  lead  the  computed  impact 
point  and  still  be  directed  toward  the  ground  is  to  compute  0 j according  to  the  expression  derived  in 
Figure  4 . That  is , 
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This  method  succeeds  in  pointing  the  target  designating  symbol  at  a point  on  the  ground  which  is 
beyond  the  impact  point  by  an  amount  approximately  equal  to  Vxt  pR.  The  parameter  t pH.  represents 
the  time  interval  between  pickle  and  release  for  an  aircraft  in  straight  and  level  flight.  Selection  of  a 
value  for  tpR  which  is  between  1 and  4 seconds  should  result  in  an  operationally  acceptable  time  between 
pickle  and  release. 


For  example,  let  us  compute  0 ^ from  Eq.  (14)  for  the  following  typical  set  of  CCRP  pickle 
conditions. 


A RELIABLE  AND  SURVIVABLE  DATA  TRANSMISSION 
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Dive  Angle 


True  Air  Speed 
Altitude,  /. 


Bomb  Range,  R 


30  deg  j 


(V  - 2*1.  S m/s) 


(6  = i7. 60  deg) 


For  a value  of  t = 2.9  sec,  we  compute  the  following  value  of  9 j-  for  this  case. 


/ 231.5  ~ x 2.S  sec\  / ln.  v 
J sec j / 1 1 1 7 m \ 

\ 144  8 in / \ 1 4 l 8 m / 

/llil f + iiLA-Li 

\ 1448/  1448 


0 = 101.4  milliradians  = 8.79  degrees 


Note  that  use  of  the  parametric  value  of  2.0  sec  for  tpj^  yields  a pipper  placement  which  is  1.  14 
degrees  (0  - Qj  - 28.  86  deg)  above  the  flight  path  angle  (y  = 30  deg).  This  is  between  the  two  popular 
pipper  placement  schemes  which  place  the  target  marker  (1)  in  the  pitch  plane  of  the  velocity  vector  or 
(2)  on  the  aircraft  bore  sight. 

The  parameter  tpp_  in  Eq.  (14)  provides  a degree  of  software  control  over  the  characteristic  time 
between  pickle  and  release  in  the  dive-toss  mode.  It  can  be  adjusted  to  suit  pilot  preference. 

Equations  (13)  and  (14)  are  the  mechanization  equations  which  satisfy  the  stated  purpose  of  placing 
the  target  designating  symbol  (see  Figure  5)  in  such  a position  that,  after  pickling  the  target,  the  pilot 
can  pull  straight  back  on  the  stick  without  first  unrolling  to  a wings  level  attitude. 

IV.  DISCUSSION 

4 . 1 Validity  of  Assumptions  and  Approximations 

The  foregoing  derivation  of  the  target  pipper  placement  equations  depended  on  two  approximations. 
The  first  is  that  pipper  motion  during  pullup  is  independent  of  bomb  drag.  The  second  is  that  the  pipper 
moves  in  a straight  line  during  a coordinated,  turning  pullup. 

The  zero  bomb  drag  approximation  really  introduces  no  new  pipper  placement  errors  beyond  those 
already  present  in  current  pipper  placement  schemes.  The  cross  trail  actually  does  change  during  the 
pullup  in  both  the  current  schemes  and  in  the  scheme  proposed  herein,  and  the  pilot  must  compensate 
for  this  variation  by  making  a small  steering  correction  during  the  pullup  maneuver  in  either  case.  The 
new  scheme  is  no  worse  than  the  present  ones  in  this  respect. 

The  second  assumption,  namely  that  the  impact  point  moves  in  a straight  line  during  the  pullup 
will  be  valid  to  the  extent  that  F,  the  denominator  of  Eq.  (10),  remains  constant  during  the  pullup.  Of 
course,  F does  change  during  the  pullup  as  the  altitude  and  dive  angle  of  the  aircraft  change.  This  alters 
the  slope  of  the  path  of  the  impact  point  in  the  sight  or  HUD  causing  the  impact  point  to  move  in  a curved 
instead  of  in  a straight  line  path. 

To  estimate  the  magnitude  of  this  slope  change,  let  us  calculate  the  value  of  F both  at  pickle  and 
again  at  release  during  a typical  dive-toss  delivery.  The  following  statements  summarize  the  pickle  and 
release  conditions. 

Pickle:  400  kt  speed,  1000  m altitude,  30  deg  dive 

Release:  4S0  kt  speed,  863  m altitude,  19.7  de r dive 

Using  the  figures  from  the  above  example  to  calculate  F as  in  Figure  2,  we  find  that 


F = sin  0 cos  y (tan  y 4 ctn  \^) 


| 0.  867  at  pickle 


0. 788  at  release 


The  corresponding  values  of  tan  (Oj  - iM  for  a 20  degree  roll  are,  from  Eq.  (13) 


tan  (<t>i  - 20  deg)  = 


1 0.  04  84  at  pickle 


[ 0. 0838  at  release 


■H'L 


The  tasks  resulting  from  a functional  decomposition  of  the  system  may  bi 
•allocated  according  to  two  philosophies  : 


The  maximum  change  in  slope  from  pickle  to  release  is  0.0354  radians  in  this  example.  'J  lie  mean 
change  in  slope  is  0.0177  radians.  This  will  multiply  by  the  angular  difference,  0.p  between  the  impact 
point  and  the  target  designating  symbol  at  pickle  to  cause  a lateral  pipper  placement  error.  Once  again, 
this  is  not  necessarily  a bombing  error  because  the  pilot  can  still  compensate  for  it  by  nulling  the  steer 
ing  signal  during  pullup.  The  whole  point  of  this  exercise  is  to  see  how  big  a compensatory  steering 
correction  he  has  to  make. 

Hie  magnitude  of  0-j>,  if  computed  according  to  Eq.  (14)  with  tp^  - 2.  5 sec  and  with  the  foregoing 
conditions  at  pickle,  is  171  milliradians.  This  angle  when  multiplied  by  the  mean  change  in  slope 
between  pickle  and  release  would  result  in  a lateral  pipper  placement  error  of  about  3 milliradians.  We 
can  conclude  from  this  example  that  the  straight  line  impact  point  motion  assumption  results  in  an 
acceptably  small  if  not  negligible  steering  error  signal. 

In  summary,  the  pilot  steering  corrections  needed  to  compensate  for  pipper  placement  errors 
caused  by  the  zero  bomb  drag  and  straight  line  impact  path  assumptions  are  no  larger  than  those  steering 
corrections  needed  in  the  current  pipper  placement  schemes. 

4 . 1 Additional  Idiot  Control  Over  Prepickle  Pippe r Motion 

As  mentioned  earlier,  the  pipper  placement  scheme  proposed  herein  gives  the  pilot  a positive, 
direct  azimuthal  control  over  the  pipper  position,  contrary  to  the  currently  operational  pipper  placement 
mechanizations  which  are  keyed  to  the  aircraft  velocity  vector.  In  order  to  change  the  azimuth  orienta- 
tion of  a drift  stabilized  pipper,  the  pilot  lias  to  change  the  azimuth  direction  of  the  aircraft's  velocity 
vector.  This  is  an  integration  process  with  an  inherent  time  lag.  The  pilot  first  has  to  roll  the  aircraft 
toward  the  direction  in  which  he  wants  to  move  the  pipper  and  pull  back  on  the  control  stick.  The  pipper 
then  gradually  moves  toward  the  desired  azimuth. 

In  contrast,  with  the  proposed  mechanization,  the  pipper  immediately  rotates  about  the  computed 
impact  point  on  a lever  arm  equal  to  0j  as  the  pilot  rolls  the  aircraft  (see  Figure  3).  The  angle  of 
rotation,  £j,  of  the  pipper  is  slightly  greater  than  the  roll  angle,  <J>,  itself.  The  pipper  is  stabilized 
against  pitching  and  yawing  motion,  because  (except  for  the  small  cross  trail  term  and  ejection  velocity 
direction  corrections  in  the  impact  point  computation) , 9 j,  tan  (^.  - 4>),  and  the  computed  impact  point 
are  all  independent  of  the  pitch  and  yaw  attitude  of  the  aircraft.  However,  the  pilot  can  make  a last 
second  azimuth  adjustment  to  place  the  pipper  over  the  target  simply  by  changing  the  roll  angle  of  the 
aircraft. 

The  sensitivity  of  this  pipper  response  to  roll  control  action  is  proportional  to  the  lever  arm.  Gq-. 
By  increasing  or  decreasing  9 j,  (through  variation  of  the  parameter  tpR)  one  can  adjust  the  pipper  roll 
sensitivity  to  match  the  amount  desired  by  the  pilots. 

4 . i Adaptability  to  CCIP  and  Level  Laydow  n Modes 

The  primary  objective  of  this  study  was  to  devise  a pipper  placement  scheme  for  dive -toss  weapon 
deliveries  which  would  not  require  the  pilot,  after  designating  the  target,  to  unroll  into  a wings  level 
attitude  before  pulling  up  to  release.  However,  upon  reviewing  the  resulting  mechanization,  one  sees 
that  it  can  be  generalized  to  include  CCIP  and  level  laydown  weapon  deliveries  as  well.  Traditional 
weapon  delivery  systems  treat  these  as  separate  modes.  Combining  them  essentially  into  a single  mode 
would  both  simplify  the  software  and  decrease  the  number  of  mode  selection  decisions  and  actions 
imposed  on  the  pilot. 

A glance  at  Figure  3 show  s that  if  0 j equals  zero,  we  have  a CCIP  weapon  delivery  mode.  Hence, 
one  can  view  the  parameter  tpR  in  Eq.  (14)  as  providing  a continuum  of  weapon  delivery  modes  with 
CCIP  being  one  extreme,  namely  tpR  = 0.  In  other  words,  the  same  software  that  is  used  for  the  dive- 
toss  mode  could  also  provide  the  CCIP  mode  simply  by  setting  tpR  = 0. 

The  level  laydown  mode  is  also  akin  to  the  dive-toss  mode  in  that  it  requires  the  target  designating 
symbol  to  be  above  the  currently  computed  impact  point  by  some  amount  0y.  The  chief  difference  is  that 
0 j must  also  be  less  than  the  angular  distance  between  the  line  - of- sight  to  the  impact  point  and  the  air- 
craft velocity  vector,  because  with  the  aircraft  in  level  flight,  the  velocity  vector  is  already  above  the 
target.  The  second  difference  is  that  the  level  laydown  delivery  uses  high  drag  bombs  instead  of  low 
drag  bombs. 

Equation  (14)  for  0T  satisfies  all  of  the  above  conditions.  Its  derivation  (Figure  4)  is  applicable  to 
both  high  and  low  drag  bombs,  and  it  directs  the  target  designating  symbol  toward  a point  on  the  ground 
which  is  beyond  the  impact  point.  In  fact,  in  level  laydown  the  time  between  pickle  and  release  is 
exactly  equal  to  tpR. 

4 . 4 Incorporation  Into  An  Operational  Weapon  Delivery  Sv st em 

The  Litton  LW  LIB  air-to-ground  weapon  delivery  system  includes  the  wings  nonlevel  pullup 
capability  described  herein.  First  operational  deployment  of  these  svstems  is  on  the  McDonnell  Douglas 
F4E's  being  delivered  to  Turkey  and  to  Greece. 


This  figure  merits  two  comment*  : 


The  natural  reluctance  on  the  part  of  users  to  place  complete  reliance  on  a new,  untried  innovation 
inhibited  full  utilization  of  the  beneficial  simplifications  potentially  achievable  by  combining  weapon 
delivery  modes.  Instead,  the  "CCRP"  mode  still  retains  the  traditional  drift  stabilized  sight  mechaniza- 
tion. However,  the  "LAYDOWN"  mode  does  employ  the  target  marker  placement  algorithm  which  per- 
mits wings  nonlevel  pullups. 

As  discussed  in  the  preceding  sections,  the  software  for  the  algorithm  is  the  same  for  level  lay- 
down  deliveries  as  it  is  for  dive-toss  deliveries.  Hence  the  pilot  can  perform  a dive-toss  delivery  using 
the  LW  even  though  the  mode  switch  is  in  the  "LAYDOWN"  position.  This  dual  mode  mechanization 

offers  pilots  the  unique  opportunity  to  try  out  and  compare  both  dive-toss  mechanizations,  wings  level 
pullup  versus  wings  nonlevel  pullup,  on  successive  passes  simply  by  changing  the  mode  switch  from 
"CCRP"  to  "LAYDOWN". 


V.  CONCLUSIONS 


5 . 1 Algorithm  for  Wings  Non- Level  Pullup 

Displacement  of  the  target  marker  symbol  from  the  computed  impact  point  by  an  amount  8p  paral- 
lel to  the  sight's  ordinate  axis  and  by  an  amount  9 -p  tan  (<*>j  - 6)  parallel  to  the  sight's  abscissa  will  per- 
mit the  pilot  to  designate  (pickle)  in  a roll  and  pull  straight  back  on  the  stick  without  first  unrolling  into 
a wings  level  attitude.  The  equations  for  computing  the  quantities  0 ant!  tan  (4>j  - o)  are 


tan  (<J>i  - <t>) 


( 1 - D tan  o 
2 

P + tan""  <*> 


where 


F = sin  9 cos  \ (tan  \ + ctn  \j) 

R^  = ground  range  to  computed  impact  point 

tpR  = arbitrary  parameter  nominally  equal  to  2.  S sec  for  dive-toss  and  level  laydown 
deliveries  or  equal  to  zero  for  CCIP  deliveries 

V = ground  speed 
x 

Z = altitude  above  target 

\ = flight  path  angle  relative  to  the  horizontal  (positive  in  a dive) 

= impact  angle  of  computed  trajectory  with  respect  to  the  horizontal 
0 = depression  angle  (below  the  horizon)  of  the  lino  - of- sight  to  the  computed  impact  point 
<t>  - aircraft  roll  angle  (positive  for  right  wing  down) 

5.  2 Effect  of  Approximations 

Approximations  employed  in  deriving  the  foregoing  equations  introduce  acceptably  small  pippor 
placement  errors  for  which  the  pilot  can  compensate  by  following  the  steering  commands  indicated  by  the 
computer  during  the  wings  nonlevel  pullup. 

S.  3 Pipper  Response  to  Rolling  Motion 

The  foregoing  pipper  placement  algorithm  provides  the  pilot  with  a direct,  positive  control  over  the 
azimuth  location  of  the  pipper  prior  to  pickle.  T3y  rolling  the  aircraft  one  way  or  the  other  he  can  move 
the  pipper  back  and  forth  across  the  sight. 
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Through  variation  of  the  parameter  tpR,  the  foregoing  pipper  placement  algorithm  can  also 
accommodate  CCIP  and  level  laydown  deliveries  in  addition  to  the  hanked  pullup,  dive-toss  delivery  for 
which  it  was  designed. 

APPENDIX  A.  PROOf  THAT  THE  PARAMETER  F IS  LESS  THAN  UNITY 
By  definition 


F = sin  0 cos  y (tan  y + ctn  y^)  (A-  1) 

where  the  three  angles,  9,  y*  and  Yj  are,  respectively,  the  angles  between  the  horizontal  plane  and 
(1)  the  line -of- sight  from  the  aircraft  to  the  computed  impact  point,  (2)  the  weapon's  velocity  vector  at 
the  computed  release  point,  and  (3)  the  weapon's  velocity  vector  at  the  computed  impact  point.  The 
downward  trajectory  curvature  caused  by  gravity  guarantees  the  following  inequalities  for  all  dive  angles 
less  than  90  degrees. 

\ < 0 < Yj  (A-2) 


By  virtue  of  the  above  inequalities 


ctn  Yj  < ctn  0 (A-3) 

Substitution  of  (A-3)  into  Eq.  (A-l)  yields 

F < sin  9 cos  y (tan  \ + ctn  0)  = cos  (0  - y ) (A-4) 

According  to  (A-2),  0 ? y for  any  dive  angle  less  than  90  deg,  and  (A-4)  thus  reduces  to 

F < 1 O.  E.  D.  (A-5) 
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However , tf  a higher  connectivity  i.  required,  the 
iour-por;  nodes  may  be  connected  together  to  form  a 


nodes  are  completely 
single  six-port  node. 
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I'hc  basi^  computer  structure  adds  to  these  advantages: 

1.  Programmability  and  reprogrummab l l i t y - This  allows  a wide  variety  o!  functional  changes  to  Ik 
made  in  the  system  which  in  turn  allows  correction  o i errors  even  in  production,  and  considtJ  »' i 
slows  product  obsolescence.  Interestingly  enough,  this  also  makes  possible  the  size-  and  cost 
reductions  that  can  be  obtained  with  I. SI.  Normally,  the  greater  the  level  of  i nt * g i a l ion , in* 
more  complex  the  circuit  and  lienee  the  more  specific  it  is  to  its  application.  Most  soph  I*  tiiutal 
applications,  in  advanced  military  systems,  have  limited  markets  and  hence  limit.!  piodmtion 
quantities,  making  it  difficult  to  recoup  the  large  non-recurring  cost  >l  'SI.  However, 
computers  are  highly  complex  elements  witli  their  system  spec  if i tv  In  their  program  not  t he i t 
circuit  structure.  This  allows  LSI  computers  to  enjoy  a large  production  volume  even  though 
there  may  he  only  a limited  demand  for  each  of  their  individual  system  applications. 

2.  Intrinsically  a time  shared  device  - The  basic  nature  of  a Von  Neumann  type  computer  1 • to  ns.  i 

single  arithmetic  element  to  perform  a large  number  ol  possible  unrelated  arithmetic  compui at  ions . 
This  is  "time  sharing  with  a vengeance"  and  can  save  a good  deal  of  hardware  over  a "dedicated 
logic"  digital  approach*. 

A key  point  in  the  above  discussion  is  the  emphasis  on  cost  and  performance  benefits.  It  is  not 

anticipated  that  tactical  missile  computers  (l'MC's)  will  be  frequently  reprogrammed  nor  that  they  will  he 

expected  to  perform  anv  extensive  interfacing  wills  human  operators.  They  are  incorporated  in  a guidance 
unit  only  because  they  are  the  most  cost  effective  wav  of  obtaining  the  required  performance  in  the  missile's 
single  f 1 i ght . 

Computer  t't  1 1 izat  ion  in  Present  Mlssl  1 e lies i^ns 

Recognizing  the  advantages  that  computers  have  to  offer,  this  section  will  show  how  these  advantages 
are  being  harvested  in  present  missile  designs.  Because  of  the  dynamic  nature  of  recent  technological 
advancement,  the  time  frame  in  question  must  be  carefully  noted.  The  discussion  here  is  of  existing  rather 
than  future  designs. 

As  defined  here,  missile  guidance  units  are  composed  of  a number  of  distinct  functional  processes. 

While  there  is  a wide  variety  in  the  content  of  each  of  the  members  of  the  guidance  family,  a list  of  the 
most  common  sub functions  would  include  the: 

target  tracking  seeker 
rear  data  link 

target  detection  device  (fuze) 
launcher  interface 
navigat ion 
flight  control 

Each  of  the  processors  performing  these  subfunctions  is  realized  with  a mix  of  analog  and  digital 
circuitry  with  the  digital  circuitry  performing  lower  speed  signal  and  data  processing  functions.  The 
digital  functions  may  themselves  be  partitioned  on  the  basis  of  speed.  Most  subfunctions  have  a require- 
ment for  some  high  speed  (real  time)  computational  logic.  Examples  are  digital  spectrum  analysis,  demod- 
ulation and  decoding.  These  functions  require  speeds  in  excess  of  that  available  from  ct>mputers  and  are 
performed  with  specialized  dedicated  logic.  Following  the  high  speed  digital  computation  are  a series  of 
functions  which  tolerate  slower  speed  numerical  calculation  and  use  a large  amount  of  logical  interpretation. 
Examples  of  these  functions  are  threshold  calculations,  parameter  estimation  and  most  post-detection  pro- 
cessing. These  functions  not  only  can  be  performed  by  a computer,  but  also  make  the  most  effective  use  of 
a computer's  logical  capabilities. 

Figure  1 exemplifies  the  approach  Hughes'  current  designs  have  taken  in  applying  computers  to  missile 
guidance.  This  is  a central  processor  system  where  a single  computer  services  each  of  the  subsystems. 

The  purpose  of  the  computer  is  to  perform  those  parts  of  the  subfunction  calculations  that  are  most  amenable 
to  computer  implementation  and  at  the  same  time  serve  as  the  integrating  element  between  all  the  subt unction 
processors. 

The  alternative  to  the  Central  Processor  is  a Distributed  Processor.  This  would  dedicate  an  individual 
computer  to  each  of  the  subsystems  with  a communications  network  connecting  them.  The  author's  choice  ot  a 
centralized  system  is  based  on  an  evaluation  of  presently  available  technology  (with  the  definition  ot 
"available"  as  derived  from  the  committment  phase  of  the  project  in  question).  Currently  then*  ippear  to  be 
four  types  of  computers  that  are  applicable  to  tactical  missile  systems.  They  are  described  in  Table  -I. 

The  first  two  computers  in  the  table  are  based  on  commercially  available  microprocessors  such  as  the  Intel 
8080  and  the  Texas  Instruments  9940.  These  computers  are  quite  low  in  recurring  cost,  but  are  also  quite 
slow.  The  basic  structure  of  those  NMOS  devices  allows  little  flexibility  In  either  their  architecture  or 
their  Instruction  set.  The  next  computer  type  in  the  table  is  realized  with  bipolar  1SI  tcclaologv.  Examples 
of  these  computers  are  fabricated  from  the  Intel  3000  and  the  American  Microdevice  2900  famlles.  The 
bipolar  logic  allows  relatively  high  speed  operation  while  the  use  of  LSI  techniques  results  in  t'airlv  high 
densities  at  low  cost.  Further,  they  are  mic reprogrammable  which  permits  the  tailoring  of  theit  instruction 
sets  and  their  architectures  to  the  specific  applications  at  hand. 


*Some  of  the  recent  researchers  in  distributed  computer  systems  have  facetiously  referred  t-*  this  single 
Arithmetic  Unit  approach  as  one  of  the  greatest  setbacks  to  computer  architecture.  However,  il  e.irlv  systems 
had  been  based  on  a more  operationally  parallel  structure,  the  Von  Neumann  system  would  have  been  invented 
anyway,  just  to  save  hardware.  As  will  be  seen,  this  is  the  key  to  an  economically  expendable  computer. 
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The  fourth  alternative  in  Table  l is  .1  fully  custom  minicomputer  using  mostly  MSI  logic,  J’his  mu c Min- 
uses very  high  speed  bipolar  devices  and  allows  complete  freedom  In  Its  urchi t ecf ural  design.  The  result  l 
a very  high  throughput  rate,  and  unfortunately,  a high  cost  and  fairlv  large  power  dissipation. 

A detailed  study  of  the  requirements  of  each  of  the  subfunctiou  processor  shows  that  they  call  toi  tin 
throughput  capabilities  of  a bipolar  computer.  Consequently,  It  a distributed  computet  system  we  proposed 
tor  a tactical  missile  it  would  force  the  designer  to  distribute  the  more  expensive  computers  shown  in  the 
last  two  entries  of  Table  1.  Trade  off  studies  have  shown  tills  tvpe  of  system  to  he  less  cost  effective  than 
a central  high  speed  computer. 

These  trade  off  studies  are  confirmed  bv  .1  traditional  method  of  est  imat  Log  computer  costs  known  as 
Crosche's  law.  Crosche’s  Law  is  an  empirically  derived  rule  which  states  that  a computer's  cost  is 
proportional  to  the  square  root  of  its  throughput.  In  other  words,  tin-  throughput  ot  a single  computet  can 
be  doubled  by  architectural  modifications  for  a 40  percent  increase  in  cost.  This  is  obviously  less  expensive 
than  using  two  computers. 

Grosche's  Law  was  formulated  in  terms  of  the  early  mainframe  computers,  but  it  lias  been  shown  to  be 
relatively  accurate  in  predicting  costs  within  a given  modern  semiconductor  technology.  It  should  bo  noted, 
however,  that  the  rule  does  not  appear  valid  in  comparing  computer  systems  realized  in  dttterent  technologies. 
Several,  say,  NMOS  computers  mav  indeed  represent  a lower  cost  solution  than  a single  hipolai  computer.  The 
majority  of  the  subfunction  speed  requirements  do  not  allow  this  to  be  a valid  missile  computet  alternative 
within  currently  available  technology. 

Which  of  the  last  two  entries  in  Table  1 are  chosen  for  a given  missile  depends  on  the  complexity  ot  that 
missile.  One  may  postulate  three  classes  ot  complexity  in  modern  tactical  missiles.  They  are  outlined  in 
Table  2.  The  first  (Class  A)  is  a very  complex  and  hence  very  expensive  missile  manufactured  In  low 
quantities.  Missiles  of  this  type  provide  high  performance  and  require  extremely  sophist  leaf ed  electronics. 
While  cost  Is  always  a concern,  the  primary  design  criterion  is  performance  with  reliability.  Tin*  second 
missile  (Class  B)  Is  a medium  cost,  medium  performance  conf igurat ion.  Its  mission  requirements  do  iu»f  demand 
the  ultimate  in  guidance  sophistication.  On  the  other  hand,  production  is  relatively  large  and  cost  becomes 
a design  constraint  as  important  as  performance.  The  third  category  of  missile  (Class  C)  has  a relatively 
simple  guidance  structure  and  is  produced  in  massive  quantities.  Mission  requirements  are  less  demanding, 
but  recurring  cost  is  of  extreme  importance. 

In  general,  the  more  complex  the  missile's  function,  the  more  powerful  a computer  it  will  require.  This 
is  largely  due  to  the  extensive  amount  of  logical  operations  needed  in  the  post  detection  signal  processing 
of  the  more  sophisticated  missile  seeker  and  rear  links.  As  a consequence,  MSI  minicomputers  are  used  in 
class  A complexity  missiles  while  bipolar  chip  sets  are  found  in  class  B missiles.  The  high  production 
class  C missiles  do  not  yet  use  computers.  This  is  largely  due  to  the  simplicity  of  their  on  board  pro- 
cessing. While  the  required  functions  must  be  performed  in  real  time,  they  are  not  complex  enough  to  justify 
the  cost  of  an  embedded  expendable  computer.  Actually  the  class  C production  volumes  in  the  hundreds  ot 
thousands  justify  the  development  of  custom  LSI  devices  (which  were  not  in  exlstance  when  the  present  gen- 
eration of  missiles  was  developed)  for  the  specific  functions  found  in  these  missiles 

Table  3 summarizes  the  observations  that  have  been  made  on  computer  select  ion  for  the  various  complex- 
ities of  tactical  missiles.  Some  typical  memory  requirements  have  also  been  included  to  give  an  indication 
of  the  program  sizes  that  are  being  discussed. 

The  concepts  that  have  been  presented  may  become  clearer  after  investigation  ot  some  examples.  The  tiist 
example  will  be  a class  B missile  used  in  an  air  to  ground  mission  and  employing  an  IK  imaging  guidance 
system.  A block  diagram  is  shown  in  Figure  2.  In  operation,  the  seeker  output  signals  are  first  sent  to  an 
avionics  display.  The  pilot  slews  the  missile  seeker  head  tin til  the  target  image  is  centered  in  the  t leld  ot 
view  (FOV) . At  this  time,  the  missile  will  begin  automatic  tracking.  As  soon  as  the  missile  acquires  the 
designated  target  it  will  be  launched  and  begin  to  home  on  the  target  bv  using  signals  derived  from  the 
target's  image  parameters. 

From  the  perspective  of  this  paper,  the  guidance  unit  contains  four  major  components:  the  socket 
electronics,  the  avionics  interface,  the  autopilot  and  the  computer.  (Fuzing  ami  power  regulat ion  t'unct tons 
may  use  the  computer  hut  are  not  discussed  here). 

The  sensing  element  of  the  seeker  is  an  IK  imager  mounted  on  a gimbaled  platform.  This  unit  generates 
video  signals  which  are  first  processed  by  analog  circuitry.  The  analog  section  provides  amplification.  An 
control,  prefiltering  and  coarse  gating.  Following  this  is  a digital  scan  converter  which  outputs  display 
compatible  composite  video  and  provides  A/P  conversion  and  buffering  intv'  the  computer.  The  computer  uses  the 
scan  converter  data  to  maintain  target  discrimination  against  background,  calculate  target  gate  sizing,  and 
compute  target  angular  displacements  which  are  used  to  provide  seeker  servo  ami  autopilot  commands.  The 
remaining  major  component  of  the  seeker  is  a dedicated  logic  frame  tv'  frame  correlator  which  reduces  the 
system  blind  range  In  the  terminal  phase  of  the  mission  and  assists  In  overcoming  temporary  loss  ot  target  lock 
due  to  imperfect  sensor  stabilization.  Outputs  from  the  frame  tv'  frame  correlator  replace  those  ot  the  scan 
converter  at  the  command  of  the  computer. 

Target  angle  signals  are  used  to  calculate  seeker  servo  and  autopilot  control  commands.  The  computer 
also  performs  some  slow  speed  calculations  for  these  servo  loops.  Kxamples  ot  these  an  the  g-bias  gimb.il 
restoration  computations  for  the  seeker  servo  and  the  lead  and  lag  computations  for  the  autopilot.  The 
majority  of  the  higher  speed  stabilization  filtering  is  left  tv'  convent  tonal  analog  circuitry. 

All  mode  changes  and  system  control  funct ions  arc  reserved  lor  the  computer.  Avionics  slewing  commands 
are  passed  through  the  computer,  while  high  speed  video  data  Is  passed  dtrectlv  through  the  umbilical  tv'  the 
display. 


Weapon  flight  path  angle,  the  angle  between  the  weapon  s velocity  vcuui 
plane  (positive  in  a dive),  at  the  (computed)  release  point. 

Flight  path  angle  of  weapon  at  (computed)  impact 


In  the  design  of  tills  system,  tin*  amt  and  computer  availability  to  a fairlv  large  degree  determined 
the  functional  partitioning  of  the  system  and  to  a certain  extent  the  complexity  ol  the  algorithms  used.  It 
is  interesting  to  note  that  the  use  ot  the  computer  to  perform  the  basic  tracker  algorithms  led  to  the 
relegation  of  most  of  the  high  speed  servo  control  logic  to  analog  circuitry.  fills  was  necessarv  because  ot 
the  computer  speed  limitations’.  The  part  icular  partitioning  used  is  based  on  the  belief  that  while  the  seivo 
loops  are  easily  performed  bv  analog  methods,  and  are  not  likely  to  change  during  the  life  ol  the  missile 
type,  the  tracker  logic  is  most  efficiently  performed  with  the  logical  and  comput at iona 1 resources  ot  a 
computer  and  is  likely  to  change  with  new  mission  requirements  or  understanding. 

Figure  1 shows  a second  example  of  computer  utilization  in  tactical  missiles.  This  system  is  a class  \ 
missile  using  dual  mode  radar  guidance  to  intercept  a highly  maneuvering  target  in  an  air-to-air  encounter. 
This  system  contains  live  major  subsystems:  the  seeker,  the  rear  receiver,  the  autopilot,  the  avionics  intei 
face  and  the  computer.  (Fuzing  and  power  regulation  again  will  not  be  discussed). 

In  a typical  operation  this  system  utilizes  a semiactive  midcourse  and  an  act ive  terminal  guidance  with 
the  same  seeker  receiver  used  in  both  modes.  Radio  frequency  (RF)  signals  are  received  hv  the  monopulse- 
antenna,  converted  to  IF  and  then  to  video  after  pre-ampl i f icat Ion  and  filtering.  The  signals  are  then  A/1* 
converted  and  passed  through  a dedicated  logic  Fast  Fourier  Transform  processor  which  performs  doppler 
filtering  and  detection.  The  detected  informal  ion  is  now  sent  to  the  computer  which  performs  target 
discrimination  (against  clutter)  anil  tracking  functions  to  extract  target  angle  information.  These  data  art- 
used  to  calculate  seeker  autopilot  steering  commands , and  system  mode  control  parameters  and  to  control  tin 
seeker  receiver. 

In  addition  to  generating  steering  commands  to  the  autopilot  and  seeker  servo  control  systems,  the 
computer  also  performs  all  of  the  stabilization  comput at  ions.  This  essentially  reduces  the  autopilot  and 
seeker  servo  circuitry  to  A/I)  and  D/A  converters. 

The  computer  also  receives  data  from  the  rear  receiver.  This  is  an  essentially  analog  receiver  with  a 
digital  message  dcmodulat Ion  circuit.  Messages  are  decoded  and  applied  to  the  other  systems  h\  the  computer 
itself. 

Again  it  can  be  seen  that  the  computer  performs  an  integration  function  between  the  major  subsystems  ol 
the  guidance  unit  and  simultaneously  performs  many  ot  the  real  lime  comput at ional  and  logical  functions 
required  bv  these  subsystems.  The  difference  between  class  A and  class  B missiles  is  the  amount  ot  comput ing 
power  available  and  the  degree  ot  computer  involvement  in  the  subsystem  functions.  The  more  complex  the 
guidance  the  more  powerful  the  computer  a fid  the  more  functions  the  computer  must  perform.  Hughes  has  found 
the  seeker  signal  processing  functions  to  require  the  most  speed  and  computational  complexity.  Consequently, 
these  are  the  functions  tint  normally  set  the  requirements  for  the  missile  computer.  Once  a match  to  the 
seeker  requirements  has  been  made,  the  other,  slower  functional  blocks  are  fitted  into  the  program  time 
loading  of  the  computer. 

ChajMc tor ist  ics  ol  radical  Missile  Computers 

Two  types  of  available  computer  have  been  identified  as  being  applicable  to  tactical  missiles.  One  is 
based  on  a bipolar  I.SI  chip  set  ami  the  other  is  a custom  high  speed  MSI  design.  In  both  cases  the  ordnance 
designer  is  given  a good  deal  of  flexibility.  This  is  fortunate  for  the  tactical  missile  environment 
generates  a set  of  unique  requirements.  The  military  system  which  comes  closest  in  structure  to  the  tactical 
missile  computer  (TMC)  is  the  avionics  computer  (AC).  The  two  types  of  TMC  are  compared  with  a typical  AC  in 
Table  4.  In  this  table  the  first  entries  are  essentially  physical  parameters.  The  most  apparent  difference 
between  a TMC  and  an  AC  is  that  the  former  is  an  embedded  unit  while  the  latter  is  a replaceable  subassemblv. 

Avionics  systems  are  in  essential lv  cont inuous  operation  and  must  be  constructed  in  such  a wav  that  they 
can  be  continuously  maintained  and  repaired  quickly  in  the  field.  Conversely,  missiles  are  used  only  once 
and  will  not  encounter  anywhere  near  the  failure  rate  that  avionics  systems  encounter.  For  this  reason  the 
TMC  can  be  totally  embedded  in  the  missile;  using  the  missile  power  supply  and  a hardwired  system  interface. 
The  AC  must  on  the  other  hand,  be  easily  accessible  and  replaceable.  It  must  have  its  own  power  form  generat- 
ing circuitry  and  Interface  with  tin*  rest  ot  tin*  avionics  system  through  a set  of  standard  connectors.  The 
missile's  simple  system  interface  is  one  of  the  factors  that  helps  reduce  the  size  and  power  dissipation  ol 
the  TMC.  Any  improvement  in  these  areas  is  crucial  as  the  volume  and  power  supply  capabilities  ol  a missile 
are  severely  constrained  when  compared  to  those  of  an  Avionics  system. 

Another  major  difference  between  Avionics  and  Missile  Systems  is  the  thermal  environment.  An  Avionics 
system  must  operate  continuously  for  an  Indefinite  time.  Consequently,  it  requires  an  efficient,  usually 
active,  cooling  system  such  as  forced  air.  Ignoring  flight  and  ground  testing,  a missile  need  only  operate 
over  the  duration  of  its  flight;  a time  that  rarely  exceeds  a minute  in  tactical  systems.  Consequently, 
operational  cooling  is  only  required  during  this  period  of  time.  Usually  a TMC  operates  with  a passive 
cooling  or  iie.it  sinking  system  that  is  designed  to  be  only  effective  during  the  flight  of  the  missile  and  is 
therefore  less  costly,  smaller  and  lighter  than  that  required  in  avionics.  An  external  auxiliary  cooling 
system  is  provided  for  system  testing. 

A TMC  differs  from  an  AC  in  functional  configuration  as  much  as  it  does  in  physical  configuration.  For 
instance,  while  both  types  of  computer#  require  1 h hit  data  words.  Avionics  systems  are  gradually  evolving 
toward  12  bit  word  lengths  while  it  is  unlikely  that  the  TMC  will  ever  need  this  added  precision.  It  is  true 
that  some  missile  functions  require  double  precision  operations,  but  these  functions  are  usually  found  in  the 
less  time  consuming  portions  of  servo  control  loops  and  do  not  represent  a significant  time  load  on  the 
computer . 

Both  types  of  computers  require  efficient  addressing  structures,  hardware  mul t ip l leal  ion  and  division 
instructions  and  efficient  branching  capabilities.  However,  TMC's  are  not  reprogrammed  with  the  same 
frequency  as  AC’s.  For  this  reason  they  do  not  require  many  of  the  programming  conveniences  found  in  AC's  or 
general  purpose  computers.  For  instance,  floating  point  hardware  and  program  relocatabi 1 itv  have  little 
utility  in  the  TMC.  This  decrease  in  complexity  is  balanced  by  the  fact  that  a TMC  must  operate  at  a higher 


pilot  and  system  by  having  the  system  anticipate  the  wings  nonlevel  pullup  and  position  the  target  marker 
accordingly.  Such  anticipation  is  achievable,  for  example,  by  positioning  the  target  marker  to  the  left  ot 
the  aircraft  velocity  vector,  when  the  aircraft  is  in  a bank  to  the  left,  and  to  tin*  right  of  the  aircraft 
velocity  vector,  when  the  aircraft  is  in  a bank  to  the  right. 


throughput  rate  than  an  AC.  As  seen  In  Table  4,  the  simplest  TMC's  operate  at  about  the  throughput  rate  of  /j\ 

the  most  advanced  AC  while  the  more  powerful  custom  designed  missile  computers  require  a throughput  rate  four 
times  that  of  it  typical  Avionics  processor.  (Special  applications  such  as  Real  Synthetic  Array  mapping  can 
require  a typically  high  throughput  rate  in  some  advanced  avionics). 

Perhaps  the  greatest  difference  between  an  Avionics  and  a Missile  Computer  Is  in  their  memory  structure. 

To  begin  with,  the  simpler  tasks  of  the  TMC  require  far  less  total  memory  than  found  in  the  AC.  In  addition, 
the  structure  of  this  memory  is  different.  A missile  computer  is  a black  box,  it  Is  programmed  once  and 
always  executes  this  program  (except  for  design  changes  that  must  be  incorporated  at  a factory  or  depot 
level).  The  typical  AC,  on  the  other  hand,  is  reprogrammed  often.  Different  programs  are  used  for  different 
mission  and  encounter  situations.  Instrumentation  runs,  training  exercises,  etc.  Consequently,  a TMC's 
program  Is  normally  stored  in  hardware  Read  Only  Memories  (ROMs)  whereas  an  AC's  program  Is  stored  in  magnetic 
core  memories  which  are  programmed  from  magnetic  tape  at  the  beginning  of  each  mission.  The  capability  of 
using  fast,  dense  ROM  program  memory  is  one  of  the  principal  ways  by  which  the  TMC  achieves  Its  high  speed. 

The  embedded  nature  ot  the  missile  computer  also  yields  some  functional  simplicity.  Because  the  input/ 
output  Interfaces  may  be  hardwired  and  specially  designed,  it  is  not  necessary  for  the  TMC  to  communicate 
through  a generalized  interface.  This  saves  both  hardware  logic  and  interfacing  time. 

The  last  differences  shown  in  Table  4 are  probably  the  most  obvious.  A tactical  guided  missile  is  a 
piece  of  expendable  ordnance,  an  aircraft  Is  not.  Consequently,  missile  components  must  be  lower  in  cost  and 
produced  in  larger  quantities  than  those  for  aircraft. 


Programming  the  Tactical  Missile  Computer 


The  previous  section  has  shown  that  the  special  requirements  of  the  tactical  missile  application  yield  a 
unique  computer  structure.  These  same  requirements  reverse  some  of  the  current  trends  in  the  way  in  which 
computers  are  used.  Throughout  most  of  the  computer  industry  there  has  arisen  a consciousness  of  the  extreme 
cost  of  software.  Computer  programming  is  very  labor  intensive.  Moreover,  modern  computer  programs  have 
become  highly  complex.  This  complexity  has  led  to  systems  which  are  extremely  difficult  to  validate  or  even 
verify.  Further,  most  computer  controlled  systems  are  constantly  being  revised,  updated  or  improved.  Thi« 
results  in  the  high  cost  of  software  becoming  a recurring  one.  As  a result  almost  any  price  will  he  paid  to 
simplify  the  preparation,  documentation  and  maintenance  of  software.  High  Order  Language  (HOL's)  are 
becoming  mandatory  for  most  military  systems  and  in  addition,  there  are  several  on-going  efforts  to  develop  a 
single  standard  HOI.  for  all  military  applications.  Coupled  with  the  increasing  cost  of  software  is  the 
declining  cost  of  hardware.  This  has  led  many  system  designers  to  use  hardware  mechanisms  to  absorb  software 
functions.  An  example  of  this  trend  is  the  growing  popularity  of  hardware  based  floating  point  arithmetic 
elements . 

In  most  military  systems  these  trends  are  completely  justified.  However,  in  current  tactical  missiles, 
they  are  not.  The  use  of  a HOI.  can  incur  a significant  penalty  in  execution  speed  and  program  memory  size 
over  assembly  language  programs.  These  in  turn  result  in  increased  hardware  complexity  and  cost. 

As  described  in  the  previous  section,  a missile  computer  is  an  embedded  "black  box".  It  is  reprogrammed 
very  infrequently  and  then  only  at  the  factory  or  depot  level.  Consequent ly , software  costs  are  nonrecurr ing. 
Hardware  costs,  however,  are  still  recurring.  Further  the  large  production  quantities  involved  with  most 
missile  systems  generate  a large  multiplying  factor  for  the  cost  of  any  hardware  addition.  Missile  systems 
simply  cannot  affo rt  to  use  a HOL  and  all  programming  is  done  in  Assembly  Language.  Further,  the  decision  to 
add  ahardware  element  such  as  a floating  point  arithmetic  element  is  made  on  the  basis  of  its  impact  on 
system  performance  and  life  cycle  cost;  not  on  its  effect  on  simplifying  the  programming  task. 

This  does  not  mean  that  software  costs  are  ignored  in  the  development  of  TMC  systems.  Even  if  it  is 
nonrecurring,  the  high  cost  of  program  development  cannot  be  Ignored,  especially  when  development  Is  bid  in  a 
competitive  environment.  As  a consequence  most  of  the  modern  software  development  methodologies  are  applied 
to  missile  design.  These  include  the  use  of  "top-down"  programming  with  "chief  programmer"  type  teams  and 
the  use  of  structured  programming. 

The  TMC's  software,  like  the  TMC  itself  is  an  embedded  part  of  the  missile.  Cost  trade-offs  involving 
this  missile  component  must  be  made  on  the  basis  of  overall  system  life  cycle  cost  rather  than  just  the  cost 
of  the  software  or  hardware  alone. 

Future  Tactical  Missile  Computer  Des igns 

To  this  point  the  discussion  has  centered  on  the  trends  and  trade-offs  involved  in  present  TMC  design. 

The  central  processing  approach  using  one  of  two  generic  types  of  computers  has  been  chosen  based  on  existing 
technology  and  the  examples  used  have  been  of  systems  that  are  currently  in  prototyping  or  production.  This 
section  will  present  the  authors'  projections  on  how  future  requirements  and  technologies  will  effect  the  next 
generation  of  TMC's. 

The  current  trend  in  missile  design  is  to  demand  more  functions  in  a smaller  sized  and  a lower  cost 
structure.  The  next  generation  missile  will  require  the  complexity  of  a class  A missile  (see  Table  1)  with 
the  price  of  a class  B missile.  Further  it  can  he  expected  that  these  functions  will  be  performed  In  a 5"  - 
8"  diameter  airframe  as  opposed  to  the  12"  - 15"  diameters  in  today's  missiles.  Some  of  the  driving  forces 
for  the  Increased  guidance  complexity  are  the  desire  for  multimode  missiles  which  might  contain  both  IR  and 
radar  (millimeter  wave)  guidance  capability.  Further,  in  the  interest  of  lower  cost  systems  there  is  a strong 
desire  to  decrease  the  allowable  guidance  error  budget  and  hence  allow  smaller  warhead  sizes.  All  these 
added  complexities  will  have  the  net  effect  of  increasing  the  amount  of  function  performed  bv  the  tactical 
missile  computer  system. 

Future  semiconductor  device  technology  will  offer  two  alternatives  to  meeting  the  demanding  requirements 
of  new  tactical  missiles.  The  architecture  of  the  future  TMC  will  depend  on  which  type  of  semiconductor 
technology  is  chosen.  The  first  of  the  technology  types  is  verv  high  speed  logic.  Included  in  this  option 
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VZ  can  be  exPressed  analytically  (for  a zero  drag  bomb)  as 


are  Gallium  Arsenide  Field  Effect  Transistor  (GASKET)  logic.  Transverse  Electron  Devices  (Tl’.Ds)  , loscphson 
junction  logic  and  Dielectrically  Isolnied  Emitter  Coupled  Eogii  (DECL).  These  technologies  will  offer 
subnanosecond  propagation  delays  and  with  the  potential  o l speeds  almost  an  order  to  magnitude  better  than 
today's  components.  A TMC  based  on  these  super  fast  devices  would  again  be  a central  processor.  The 
increased  functional  capabilities  would  be  obtained  through  the  increased  speeds  and  extended  time  sharing 
available.  Unfortunately,  the  future  high  speed  technologies  will,  at  best,  and  the  sunn-  densities  and  powet 
dissipations  of  the  present  high  speed  logic  tamilies.  Further,  lie  motivating  force  behind  their  development 
is  the  mainframe  computer  market . It  is  unlikely  that  they  will  ever  b«  available  at  low  functional  cost  or 
be  produced  tor  a large  commercial  market.  The  super  fast  devices  are  currently  in  research  laboratories  and 
their  availability  to  missile  computer  design  is  at  least  five  vears  in  the  future. 

The  second  new  technology  type  is  the  very  dense  LSI  logic-.  Included  in  this  option  arc  Integrated 
Inject  Lon  logic  (I'l.),  Sil  icon  on  Saphire  lompl ementary  Metal  Oxide  Semiconductor  (SOS  CMOS)  logic,  and  High 
Performance  Metal  Oxide  Semiconductor  (HMDS)  logic.  These  families  will  probably  never  exceed  the  speed  of 
present  bipolar  logic  families  but  will  otter  higher  density,  lower  power  dissipation,  and  lower  cost, 
functions.  The  bas.1 c driving  force  behind  these  technologies  is  the  commer icu l market  and  such  devices  are 
already  becoming  available. 

Applying  the  high  density  ESI  tamilies  to  the  more  demanding  requirements  of  future  missiles  will  require 
systems  that  contain  several  parallel  computers.  This  distributed  processing  approach  has  up  to  now  been 
found  inferior  to  central  processing  (single  high  speed  comput et*) . The  penalties  that  have  reduced  its 
acceptance-  are  primarily  due  to  interprocess  common  icat  ion  and  svnehron  i /.at  ion.  It  is  the  author's  opinion, 
however,  that  the  nature  the  TMG's  application  will  ameliorate  manv  of  these  difficulties.  A?;  was  described 
previously,  the  TMC  is  used  to  perform  the  computat ional  and  logical  tasks  of  the  various  subsystems  of  the 
missile  guidance  unit  and  at  the  same  time  integrate  the  functions  of  these  tasks.  If  one  or  perhaps  two 
microcomputers  are  dedicated  to  each  subfunct  ion  and  il  another  microcomputer  is  dedicated  to  the  integral ing 
function,  each  ot  the  microcomputers  would  operate  relatively  independent  of  each  other  with  the  i tit ercomputer 
communications  being  relatively  slow.  The  reason  a distributed  system  of  this  sort  is  not  used  now  is  that  a 
certain  minimum  speed  is  required  oi  the  subsystem  dedicated  computers.  Currently  this  speed  is  available 
only  in  the  bipolar  chip  sets  which  are  too  expensive  to  proliferate  through  the  system.  The  new  technologies 
will  make  this  speed  available  in  single  chip  processors  .it  a low  cost  and  thus  lead  to  a cost  effective 
structure. 

The  distributed  computer  approach  to  the  TMC  is  shown  in  Figure  4.  This  is  the  authors'  prediction  ol 
the  next  generation  of  TMC.  In  addition  t o being  cost  effective,  such  a system  will  lead  to  a more  modular 
system  and  will  probably  eliminate  the  two  tier  approach  to  design.  Both  class  A and  class  B missiles  will 
use  the  same  type  of  microcomputer  components  shown  in  the  figure,  the  difference  being  in  the  number  of 
processors  and  the  level  of  integration. 

Cone  1 vision 

Tactical  missile  computers  are  already  used  to  or  proposed  tor  many  of  the  computational  and  logical 
processes  for  many  of  the  subfunct ions  found  in  tactical  missile  guidance  units.  In  addition  they  perform 
the  overall  integration  and  control  ot  these  subfunct ions.  Presently,  TMC's  require  throughput  rates  that 
are  only  available  in  computers  based  on  bipolar  technology.  There  are  two  types  of  such  computers  available, 
one  based  on  ESI  bipolar  chip  sets  and  the  other  based  on  a custom  MSI  design.  The  bipolar  chip  sets  offers 
a relatively  low  cost,  consume  very  little  volume,  and  have  medium  power  requirements.  Unfortunately  their 
instruction  throughput  rate  is  only  on  the  order  of  400  - 500  Kll’s.  Computers  of  this  type  are  used  in  medium 
complexity  missiles  having  production  quantities  up  to  30,000.  For  higher  complexity,  lower  production 
missiles,  the  custom  architectures  based  on  available  MSI  devices  are  used.  These  computers  feature  very  high 
throughput  rates  but  also  incur  additional  volume,  power  and  cost  penalties.  Cost  tradeoffs  have  shown  that  a 
central  processing  system  architecture  Is  the  most  efficient  in  the  light  ot  available  technology. 

Missile  computers  are  considerably  different  from  those  found  in  avionics  systems.  In  general,  they  must 
be  faster,  lower  cost  and  smaller  than  avionics  computers.  Fortunately,  proper  utilization  oi  the  TMC's 
embedded  nature , shorter  operating  time  and  infrequent  reprogramming  allows  the  meeting  of  its  rather 
demanding  performance  objectives  and  physical  constraints. 

It  is  expected  that  the  new  semiconductor  technologies  will  have  a dramatic  effect  on  tactical  missile 
computer  architecture.  High  density,  love  cost  processors  with  the  speeds  of  currently  available  in  bipolar 
device  technology  will  make  ESI  microprocessors  cost  effective  in  distributed  system  architectures  in 
tactical  guided  missiles. 

This  new  distributed  structure  will  reduce  the  computer  hardware  differences  between  the  complexity 
classes  of  missiles  and  will  in  addition  expand  the  functional  utilization  of  computers.  Such  improvements 
are  mandatory  if  the  conflict  between  the  increasing  mission  demands  and  the  decreasing  volume  resources  of 
future  guided  missiles  is  to  he  resolved. 
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For  example,  let  us  compute 
conditions. 


© T from  Ecl*  for  the  following  typical  set  of  CCRP  pickle 


A RELIABLE  AND  SURVIVABLE  DATA  TRANSMISSION 
SYSTEM  FOR  AVIONICS  PROCESSING 


BY 

D.R.  POWELL,  J.C.  LAPRIE 

LABORATOIRE  D ' AUTOMAT I QU E ET  D'ANALYSE  DES  SYSTEMES  DU  C.N.R.S. 
7,  Avenue  du  Colonel  Rochv  - 31400  TOULOUSE  - FRANCE 


AND 


P.  ROMAND,  G.  ALCOUFFE 
SOCIETE  CROUZET 

Rue  Jules  V6drine  - 26010  VALENCE  - FRANCE 


X 


SUMMARY 


This  paper  describes  a reliable  and  survivable  system  (RHEA)  for  intercon- 
necting real-time  processing  elements.  Motivations  are  given  for  the  choice  of  the  two- 
level  RHEA  structure  : a distributed  “irregular  network"  and  a set  of  local  "star  struc- 
tures". The  irregular  network  has  active  nodes  that  carry  out  automatic  signal  routing 
whereas  the  star  structure  has  a passive  central  node  based  on  a loosely-coupled  pulse 
transformer.  Two  types  of  communication  control  are  presently  under  analysis  : "conten- 
tion control"  and  a "decentralized  daisy  chain"  ; the  final  choice  will  be  based  on  se- 
curity and  modularity  criteria. 

INTRODUCTION 


The  last  few  years  have  been  marked  by  a spectacular  progression  in  the 
complexity  of  the  systems  tackled  by  automatic  control  and  computer  science.  This  is  due 
to  the  evolution  of  the  missions  assigned  to  Man  which  reach  and  often  pass  the  limits 
of  his  possibilities.  This  is  particularly  so  in  aeronautics  as  a consequence  of  the 
missions  that  are  assigned  to  him  : transport,  interception,  ground  attack,...  This  pro- 
gression has  been  made  possible  thanks  to  the  technological  revolution  which  has  led  to 
the  availability  of  highly-integrated  and  modestly-priced  processing  and  memory  ele- 
ments . 


When  one  adds  to  this  the  criteria  of  operating  costs  and  versatility,  one 
is  naturally  led  to  the  notion  of  decentralization  of  the  processing  related  to  the 
different  functions  to  be  carried  out  and  the  notion  of  the  integrated  system. 

However,  a significant  factor  slowing  down  the  progression  of  system  auto- 
mation ana  integration  has  been  the  lack  of  confidence  in  distributed  computing  systems 
regarding  their  aptitude  to  satisfy  the  operational  security  criteria  : reliability, 
availability,  survivability  (invulnerability),  maintainability,... 

The  security  objectives  of  a distributed  computing  system  must  be  satisfied 
at  two  levels  : 

- resource  management  level  : measurement  of  the  state  of  the  resources,  resource 
allocation  in  function  of  the  system  objectives, 

- communication  level  : realization  of  an  operationaly  secure  system  for  transmit- 
ting data  between  the  computing  elements. 

This  paper  presents  a study  concerning  the  latter  level. 

In  distributed  real-time  computing,  the  global  real-time  control  process  is 
divided  into  tasks  that  may  be  executed  in  parallel.  Such  a decomposition  is  attractive 
for  several  reasons  : 

- from  an  appl ica  t ion  viewpoint  ; partitioning  the  system  into  tasks  is  conceptualy 
simple,  this  is  especialy  so  since  systems  are  frequently  defined  on  a subsystem 
by  subsystem  basis, 

- from  a technological  viewpoint  ; if  sufficiently  simple,  tasks  may  be  executed  by 
computing  elements  realized  with  a relatively  slow  technology  whereas  the  overall 
system  throughput  may  be  increased, 

- from  an  operational  security  viewpoint  ; tasks  may  mutualy  survey  each  other  and 
initiate  task  reconfiguration  upon  detection  of  an  anomaly  or  malfunction. 


This  work  was  supported  by  the  Direction  des  Recherches,  Etudes  et  Techniques,  under 
contract  N°  76/274 
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The  tasks  resulting  from  a functional  decomposi tion  of  the  system  may  be 
allocated  according  to  two  philosophies  : 

- physical  centralization  : the  tasks  are  functionaly  distributed  on  a single 
parallel  processing  machine  cnc2i  . 

- physical  distribution  : the  tasks  are  functionaly  and  physicaly  distributed  on 
distinct  machines  f 3^  . 

The  first  approach  leads  to  the  realization  of  a fault-tolerant  multipro- 
cessing machine  that  communicates  with  the  system  sensors  and  actuators  over  one  or  se- 
veral fast  input-output  channel  (s)  . 

The  second  approach  means  that  the  tasks  are  executed  by  a set  of  physicaly 
distributed  computing  elements.  These  computing  elements,  together  with  sets  of  sensors 
and  actuators,  form  a set  of  loosely-coupled  "subscribers"  that  must  communicate  with 
each  other  in  order  to  co-ordinate  their  actions  so  as  to  achieve  the  global  system 
objective . 

The  study  presented  in  this  paper  adopts  the  second  approach  in  order  to 

realize  a system  that  is  completely  distributed,  both  functionaly  and  physicaly. 

The  RHEA  system,  which  signifies  "Roseau  Hierarchise  pour  Envi ronnement s 

Agressifs"  ("Hierarchical  Network  for  Agressive  Environments")  is  thus  aimed  at  the 
reliable  and  survivable  interconnection  of  relatively  autonomous  subscribers  (sensors, 
computing  elements,  actuators),  in  an  enlargened  set  of  failure  hypotheses  which  are 
characteristic  of  real-time  and  on-board  systems  : component  failure  mechanical  damage, 
electromagnetic  perturbations. 

A reliable  and  survivable  interconnection  system  must  feature  a good  opera- 
tional security  at  three  levels  : 

- the  architectural  or  structural  level, 

- the  physical  implementation  level, 

- the  communication  control  level. 

The  first  part  of  the  paper  thus  gives  the  motivations  for  the  choice  of 
the  RHEA  structure  which  consists  of  two  levels  : 

- a distributed  "irregular  network", 

- a set  of  local  "star  structures". 

The  second  part  of  the  paper  describes  the  physical  implementation  and  the 
operating  principles  of  the  RHEA  structure. 

The  third  and  last  part  of  this  paper  deals  with  reliable  communication 
control  which  is  an  essential  part  of  any  operationaly  secure  data  transmission  system. 

I . DEFINITION  OF  THE  RHEA  STRUCTURE 

I . 1 . The  data  processing  structure 

Current  distributed  control  systems  are  normaly  realized  according  to  one 
of  four  data  processing  structures  . These  structures  are  shown  in  figure  1.  It 

should  be  underlined  that  these  structures  are  defined  according  to  a data  processing 
definition  that  results  from  the  way  messages  are  vehiculed  between  computing  elements 
and  does  not  necessarily  infer  a physical  implementation  of  that  structure.  An  example 
of  a structure  whose  physical  implementation  is  fundamentaly  different  from  its  data 
processing  definition  is  OSIRIS  [lj  (5j  . In  this  system  a central  f aul t- tolerant  multi- 

processor communicates  with  input-output  organs  on  a master-slave  basis,  messages  are 
either  master  to  all  slaves  or  slave  to  master.  The  data  processing  definition  is  thus 
that  of  a global  bus  with  a central  switch  (see  figure  1).  However,  the  physical  imple- 
mentation of  the  OSIRIS  system  is  not  at  all  a bus  structure  but  takes  the  form  of  an 
irregular  network. 

As  described  in  the  introduction,  we  are  interested  in  realizing  a highly 
secure  loosely-coupled  system.  Consequently,  the  global  bus  structure  would  seem  a like- 
ly candidate  since  all  the  subscribers  are  connected  together  homogeneously  and  there 
is  no  central  point  susceptible  to  failure  other  than  the  "bus"  or  communication  medium. 

In  reality,  the  subdivision  of  a control  system  into  tasks  often  leads  to 
groups  of  physicaly  localized  tasks  that  communicate  more  frequently  among  themselves 
than  to  other  tasks  in  the  system.  For  this  reason,  a hierarchical  structure  such  as  the 
bus  window  approach  would  seem  interesting. 

The  RHEA  system  consists  of  a two-level  hierarchical  bus  window  structure 
and  can  be  represented  schematically  as  shown  in  figure  2. 
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4 . 4 Incorporation  Into  An  Operational  Weapon  Delivery  System 


The  Litton  LW  33B  air-to-ground  weapon  delivery  system  includes  the  wings  nonlevel  pullup 
capability  described  herein.  First  operational  deployment  of  these  systems  is  on  the  McDonnell  Douglas 
F4E's  being  delivered  to  Turkey  and  to  Greece. 


This  figure  merits  two  comments  : 

- the  bus  window  or  inter-level  interfaces  may  be  considered  as  a simple  subscri- 
ber when  viewed  from  either  level, 


- the  information  is  transfered  through  blocks  : arposely  labeled  as  communication 
media  since  the  latter  may  be  realized  in  several  different  physical  implementa- 
tions (bus,  network,  star,...) 

1.2.  The  communication  media 

The  two  different  levels  of  communication  media  defined  in  paragraph  1.1. 
may  be  studied  as  independant  global  "bus"  structures  for  which  the  physical  implemen- 
tation must  be  chosen  in  order  to  obtain  a high  operational  security. 

With  this  aim  in  mind,  we  have  carried  out  an  analysis  of  several  hypothe- 
tical physical  structures  realizing  the  global  bus  data  processing  function.  These 
structures  are  defined  and  commented  in  the  table  of  figure  3. 

A complete  comparative  study  of  these  structures  must  take  account  of  di- 
verse criteria  related  to  operational  security,  operating  costs  and  versatility. 


The  initial  study  that  we  have  carried  out  is  a qualitative  analysis  in- 
volving mainly  two  components  of  the  operational  security  : reliability  and  survivabi- 
lity. 

This  will  later  be  completed  by  a quantitative  study  including  other  cri- 
teria such  as  maintainability,  cost,  versatility,  etc. ..This  quantitative  study  will  be 
carried  out  according  to  two  hypotheses  : 

- an  unmaintainable  environment  : repair  during  the  mission  is  impossible  and  suc- 

cessive failures  must  be  envisaged  ; this  study  makes  use  of  both  the  MARKOV  and 
the  minimal  path  approaches  Pfl  [>3]  . 

- a maintainable  environment  : repair  during  the  mission  is  possible  and  the  cor- 
responding reliability  models  may  be  simplified  by  assuming  that  no  further  fai- 
lure occurs  during  the  repair  periods  [!«]• 

The  qualitative  analysis  enables  the  choice  of  one  of  the  six  structures 
defined  in  figure  3 in  function  of  the  environment  and  the  geographical  distribution  of 
the  subscribers. 

1.2.1.  §ubscr ibers_2®22£aghicaly_di s tr ibu ted  in  a non-hostile  environment 


When  the  subscribers  are  geographicaly  distributed,  the  star  structure  may 
be  eliminated  due  to  the  high  implied  wiring  costs. 

Also,  a non-hostile  environment  means  a very  low  probability  of  multiple 
localized  failure  : we  need  only  account  for  single  random  failures.  Consequently,  all 
those  structures  intended  to  provide  multiple  paths  (network  structures)  are  needlessly 
compl icated . 


Thus,  the  structure  most  capable  of  tolerating  random  single  failures 
is  the  protected  bus  structure,  the  node  bus  brings  unnecessary  complication  only  in 
order  to  tolerate  bus  section  short  circuits. 

1.2.2.  Subscr ibers^geograghicaly  distributed  in  a hostile  environment 

The  star  structure  may  be  eliminated  for  the  same  reasons  as  above. 

A hostile  environment  means  that  we  must  account  for  multiple  localized 
failures  due  to  physical  damage  (accident  or  agression)  or  electrical  perturbation. 

Consequently,  all  the  bus  structures  must  be  eliminated  since  the  busses 
must  all  meet  in  certain  places  such  as  the  actual  connections  to  the  subscribers. 

The  only  structure  permitting  multiple  local  failures  without  total  dis- 
ruption of  communication  is  the  network  structure.  Due  to  the  constraints  imposed  by  the 
geographical  location  of  the  subscribers  the  topology  of  the  network  is  usually  irregu- 
lar. 

However,  when  active  nodes  are  considered  the  problem  of  supplying  them 
with  electrical  power  is  posed.  It  is  often  supposed  that  the  subscribers  are  indepen- 
dently powered  and  the  choice  of  an  irregular  network  is  justified  by  the  fact  that  the 
nodes  may  be  powered  from  the  same  source  as  corresponding  subscriber. 
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azimuth  location  of  the  pipper  prior  to  pickle.  By  rolling  the  aircraft  one  way  or  the  other  he  can  move 
the  pipper  back  and  forth  across  the  sight. 
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In  reality,  espe cial y in  on-board  system,  power  is  distributed  to  subscri- 
bers from  a central  point  fl  5J  and  it  is  no  use  providing  a highly-secure  damage-proof 
data  commun lea  t ion  tructure  if  the  power  distribution  system  does  not  present  the  same 
qualities  : 


- if  power  is  distributed  by  a cable  harness  then  the  equivalent  data  communica- 
tion structure  is  the  star  structure, 

- if  power  is  distributed  by  bus-bars  then  the  equivalent  data  communication 
structure  is  a bus  structure . 


Consequently,  if  subscriber  electrical  power  is  not  idependently  provided 
the  irregular  data  communication  network  may  only  be  justified  if  it  is  accompanied  by 
an  irregular  network  for  power  distribution. 

1.2.3.  Geog raph i ca 1 ^ _ loca 1 1 zed  subscribers 


In  the  case  of  geog raphi ca 1 y localized  subscribers,  the  fact  as  to  whether 
or  not  the  environment  be  hostile  is  irrelevant  since  an  external  perturbation  could 
affect  all  of  the  system  as  easily  as  a part  of  it. 

Also,  the  star  structure  no  longer  presents  any  wiring  problems  and  it  is 
in  fact  this  structure  that  seems  the  best  if  the  central  node  can  be  designed  in  such  a 
way  that  no  single  failure  leads  to  total  loss  of  commun i ca t ion . 

1.3.  Final  choice 


The  RHEA  system  is  intended  to  operate  in  an  environment  where  physical 
damage  is  a possibility  and  as  a result  of  the  above  analysis  the  physical  structures 
chosen  for  the  two  levels  are  : 

- Level  1 (geographicaly  distributed)  : Irregular  network, 

- Level  2 (geographicaly  localized)  : Star  structure. 

An  example  topology  is  given  in  figure  4. 

II . DESCRIPTION  OF  THE  RHEA  STRUCTURE 

I I . 1 . Level  1 : an  irregular  network 

The  heart  of  the  RHEA  system  is  the  geographicaly  distributed  irregular 
network  providing  fault  and  damage  tolerance. 

In  such  a network,  the  nodes  must  be  active  in  order  to  prevent  pulse  dis- 
persion due  to  multiple  signal  paths  and,  in  non  fiber-optic  systems,  to  isolate  link 
short-circuit  failures.  As  a consequence  of  the  former  point,  each  node  must  choose  one 
port  at  a time  as  an  input  port.  One  way  of  achieving  this  is  to  control  the  directivity 
of  the  node  by  a control  algorithm  C O • 

The  method  used  in  RHEA  is  to  carry  out  signal-routing  automatically  by 
"electing"  an  input  port  by  arbitration  of  the  received  signals  and  retransmitting  the 
elected  input  out  of  the  remaining  ports. 

II. 1.1.  Operating_principle_of  irregular  network  node 

The  block  diagram  and  the  timing  diagram  of  a self-routing  node  is  given 

in  figure  5. 


The  output  signal  X of  the  detector  circuit  is  such  that  it  rises  just 
after  reception  of  the  first  received  signal  and  falls  a time  after  the  end  of  the 
last  received  signal.  The  rising  edge  clocks  a pair  of  latches  whose  outputs  G_  G.  se- 
lect the  appropriate  "elected"  input  of  the  multiplexer.  In  the  event  of  simultaneous 
arrivals  at  the  node,  the  encoder  circuit  chooses  one  of  the  inputs  on  a priority  basis, 
an  independent  choice  is  unnecessary  because  the  inputs  signals  arc  copies  of  the  same 
signal  (we  assume  in  this  section  that  only  one  subscriber  at  a time  may  transmit). 

The  guard  time  ensures  that  signals  to  not  propagate  unendingly  around 
the  network  and  the  delay  ^ in  the  multiplexer  input  paths  avoids  shortening  of  the 
first  pulse  due  to  the  input  selection  delay. 

To  give  an  idea  of  the  simplicity  of  the  node,  a functional  circuit 
without  autotest  h?i  been  realized  using  eleven  ordinary  SSI-MSI  TTL  circuits. 

1 1 . 1 . 2 . Connectivity_and_modularity 


As  shown  in  figure  5,  the  nodes  have  been  provided  with  four  i /0  ports. 
This  figure  was  chosen  so  that  a subscriber  (connected  to  one  of  the  four  ports)  may 
have  three  connections  to  the  network.  The  network  so  obtained  may  thus  be  three-connec- 
ted resulting  in  a sufficient  connection  reliability  for  most  applications  . 


However,  if  a higher  connectivity  is  required,  the  nodes  are  completely 
modular  ; two  four-port  nodes  may  be  connected  together  to  form  a single  six-port  node, 
three  four-port  nodes  form  an  eight-port  node,  etc. 

11.1.3.  Node_Oj)erational  security 

Tolerance  of  faults  arid  damage  is  inherent  to  a network  structure  but  the 
basic  node  concept  given  above  is  insufficient  for  three  reasons  : 

- failure  of  a node  leads  to  the  loss  of  a subscriber  : this  may  not  be  acceptable 
for  the  more  critical  subscribers, 

- system  reconfiguration  will  be  more  efficient  if  the  total  system  status  may  be 
observed  at  any  instant, 

- the  nodes  must  not  feature  failure  modes  that  are  catastrophic  to  overall 
network  communication. 

Two  levels  of  operational  security  thus  appear  : 

- knowledge  of  the  state  of  the  network  which  can  be  achieved  with  se 1 f -check i ng 
node  s , 

- fault- tolerant  nodes  for  connection  of  critical  subscribers  (which  could  them- 
selves be  fault-tolerant) . 

The  second  level  is  obtained  simply  from  the  first  by  virtue  of  the  con- 
nectivity modularity  of  the  nodes  : associating  two  se 1 f - check i ng  nodes  (with  self- 
disconnection in  case  of  failure)  leads  to  a f au 1 t- to le r ant  node  with  one  degree  of  re- 
dundancy . 


This  solution,  which  enables  a graduation  of  f a u 1 t - t o 1 e r ance  via  identical 
elements,  was  thus  prefered  to  the  TMR  solution  which  has  also  been  considered. 

The  chosen  fault-detection  method  is  a duplication  and  comparison  struc- 
ture. Two  elementary  nodes  as  defined  in  figure  5 are  connected  in  parallel  and  their 
outputs  are  compared  with  a se 1 f -check  i ng  comparator  using  morphic  boolean  logic  f 1 7 1 
[l8j  [l9j  [20J  (figure  6)  . 

The  output  signal  of  the  se  1 f -check  i ng  comparator  is  processed  in  order  to 
filter  out  parasitic  errors  and  upon  detection  of  an  out-of-code  signal,  power  to  the 
node  is  removed. 

An  original  aspect  of  the  s e 1 f -check i ng  comparator  is  the  method  used  for 
ensuring  error-detection  in  the  comparator. 

The  p'-')blem  is  due  to  the  fact  that  the  four  outputs  S.,i€[o,3}of  Nj, 
which  are  compared  *ith  the  complemented  output  W of  N , are  in  fact1four  copies  of  the 
same  signal.  Consequently,  if  two  pairs jw  s]  (w  S ] are  compared  by  a l-out-of-2  compa- 
rator , the  input  signals  only  describe  one-Aalf  oif  the  comparator  input  space  ( (o  lj  ( 0 l] 
and  (1  0}  (lOj).  The  outputs  { f , gj  thus  remain  fixed  at  01  and  the  comparator  is  no 
longer  se  1 f -check ing . 

The  solution  to  this  problem  is  to  provide  another  pair  of  inputs  to  the 
comparator  which  is  obtained  by  a simple  division  by  two  of  the  node  output  signals.  The 
f crSW  C°impdrf  t0)r  rth)US  ^cdves  signals  that  describe  all  of  its  input  space  ( {oi]{(3l]  ; 

1 1 0 j ( 0 ly  ; joi]  \ 1 Oj  » \ 1 0j  { 1 0J  ) and  the  effect  is  cascaded  to  the  other  comparators 

(figure  7 ) . 


The  outputs  of  the  comparator  stages  are  no  longer  constant,  their  com- 
plete input  space  is  described  and  se 1 f -check i ng  is  thus  maintained. 

II. 1.4.  Signal  path 

When  these  self-routing  nodes  are  connected  together  to  form  a network, 
signals  are  propagated  from  a transmitting  subscriber  along  a tree-like  path  to  every 
other  subscriber  in  the  network  (figure  8). 

In  such  a network,  signals  arriving  on  the  input  ports  of  a particular- 
node  may  originate  from  either  a subscriber  or  a neighboring  node.  Consequently,  the 
maximum  delay  between  the  first  and  last  received  signals  is  equal  to  2T  where  T is 
the  maximum  node  plus  link  propagation  delay.  This  is  due  to  the  fact  thit  the  worst 
case  delay  corresponds  to  the  "echo"  of  the  "elected"  input  signal  from  a neighboring 
node  . 
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1't.MAHK  : Tin'  :•  l -it  turt  m i-  may  a l o 1>«'  i r.i  1 i .um  u ••  i mj  l i 1*«m  op  1 i v t e c lino  l oo y s i n»j 
mirror  coup 1 1 mi  .'1  ( I niui  f III. 

Sue  li  .i  umIi.mI  ion  i r.  I n toio  s t i mi  I i om  t lie  t i bo  t opt  i c viewpoint  siiio-  .ill 
Mil'Sii  ibi’t  sulv.ii  1 l'fi  paths  t e a t u t e the  same  optical  .it  I enu.it  Ion.  Howe  v e i , s t u ck  - a t - one 
I .ii  lui  es  o t t li  e s ul'S  e i i l'et  l i a h t emitters  a i e not  t o l e t a t ed  as  in  the'  loosely  - rouploil 
t t a n s l o i me i . 

111.  i’OMMUN  l CAT  ION  '.T»NTKO|, 

In  oi  ili'i  I o a voi  .1  any  rout  t ,il  i /at  ion  in  out  .j  l oba  l luir.  .1 .» t a p i oee  s s i no 
sy  • t i-m  , it  is  1 ovj  leal  t ha  t comuiun  i ca  t i on  rout  i o 1 shou  l d a l so  be  comp  l e t .*  I y .1  i ••  t i i bu  t ed  . 

It  the  lull  be  lie  t i t s o t do  co  n t i .i  1 t / a t i on  are  to  be  obt  .1 1 nod  much  .it  t ont  ion  must  be  paid 

to  the  i eco  ve  i ab  i l i t y ami  the  mo.lu  1 a i i t y o t the  con  t i o l method. 

The  I wo  most  likely  candidates  tot  an  opet  at  ioiia  I y secure  ami  modular 
I'ommunii'.it  ion  control  ate 

con  tent  i on  con t t o 1 C"3  l.']  U inure  l ) , 

decentralized  via  l sy  chain  [•’•'}  i t i d u t e l I ) . 

1 l 1 . I . I'ommuni  cat  ion  > on  t t o 1 on  the  i t t e.julat  net  wot  k 

1 l l . 1 . I . lit  led  o|  coni  l I ct  on  t lie  net  Wot  k 

Cons  t de  t the  e v«*n  t of  t us*  n ti  bs  c i t be  r s s t a t t i mi  t t a u silt  i ss  ion  s at  times  0 

mi  . * 8 tf.peot  Ivoly.  i'ligut  e 1*1  <j  t ve  s an  example  o t such  a si  t ual  ion  ; t lie  times  mat  k e d 

the  nodi*  ports  ate  the  times  at  which  •'*  i u n a 1 ;;  ate  t eco  i ved  whet  o T is  the  it  ode  plus 

link  pi  op.i.j.il  ion  time  l fUipposoil  const  ant  ) , the  dotted  port  cot  responds  t o the  elected 

l spat  . 

since  the  nodes  ate  locked  onto  the  elected  input  t t om  t he beq i nn i no  ot  t hi 
j n a l i f.  eiveil  to  the  end  of  t lie  last  s t »j  n a I received,  all  those  s ubsc  » i bo  r s to 
• •'  t the  dot  toil  line  tecoive  the  message  emanatimj  t t om  node  l and  those  to  the 
n .le  Id.  No  i f he  t miiI'Si’i  i bin  is  con  sc  t ous  that  cont  l lot  is  oc  out  i mi . Thus  , 
t • envisaged  lomniiini  cat  ion  control  systems,  female  cont  1 tot  detection  is 


it  «id  tt'ii  . on  t t o l 

' »ti  • n . on  t t o l system,  cont  l id  s must  be  detected  in  ot  det  tv* 


1 


Firstly,  an  acknowledge  message  may  be  sent  by  the  destination  subscriber. 
Lack  of  receipt  of  an  acknowledgement  message  would  mean  that  the  transmission  has  been 
perturbed  and  the  message  must  be  retransmitted.  This  method  for  contention  detection 
has  two  disadvantages  : 

- conflicts  are  detected  only  after  the  end  of  a message, 

- an  acknowledgement  message  means  that  a broadcast  mode  is  not  feasible. 

The  second  way  to  detect  conflicts  implies  a modification  to  the  nodes  in 
order  to  detect  the  fact  that  different  me;sag«-  are  being  received  inodes  2,  b , 7 and 

8 in  figure  14)  . This  may  be  achieved  either  by  decoding  t hi-  messages  or  by  simply 
comparing  the  inputs  of  each  node  with  their  output*.  Th«-  t i i st  method  leads  to  consi- 
derable complication  of  the  node  and  the  second  implies  restriction*  as  to  the  maximum 
delay  permitted  for  an  inter-node  link.  A node  that  le  t e » t • n t e ti  t i . • n sends  a pulse  on 
its  ouputs  in  order  that  neighboring  nodes  may  a 1 so  dete  t the  >n  t <m.  t l on  . The  conflict 
signal  thus  "bubbles  " out  to  the  sources  of  the  . > n t l i « t i n g t it  n •.«  i s s i n s . 

111.1.3.  Dals^  chain  control 

In  a daisy  chain  control  system,  conflicts  mi-  t be  |»tv>  ted  in  order  to 
detect  disynchronization  and  to  initiate  an  initialization  pieduie. 

With  the  irregular  network,  one  way  of  achieving  nflict  detection  is  to 
include  the  contents  of  the  counter  as  a word  in  each  message  transmitted  (including 
the  synchronization  message)  If  a subscriber  detects  a difference  between  its  counter 
and  the  corresponding  word  in  a received  message,  it  takes  the  r esponsab i 1 i t y of  re- 
initializing the  system.  This  may  be  done  by  sending  a signal  at  a different  frequency 
which  the  nodes  detect  as  a priority  signal  that  interrupts  the  elected  input  and  is 
retransmitted  over  the  ouput  ports. 

1 1 1 . 2 . Communication  control  on  the  star  structu re 

In  the  star  structure,  conflicts  may  be  detected  by  a 1 i st en- whl le- ta 1 k 
device  that  delivers  an  interrupt  to  the  subscriber  if  the  received  and  transmitted 
signals  do  not  concord. 


applicable. 


Thus,  either  of  the  two  envisaged  communication  control  methods  is  equally 


III. 3.  choice  of  a control  method 

The  choice  between  contention  control  and  a decentralized  daisy  chain  will 
be  made  after  a study  weighing  the  advantages  and  disadvantages  of  both  methods.  This 
study  is  presently  being  carried  out  with  the  aid  of  a discrete  time  simulation  using 
the  IBM  GPSS  simulation  program.  This  simulation  will  highlight  the  properties  of  the 
control  methods  concerning  : 

- their  aptitude  for  real-time  control  (transmission  blocking  times), 

- their  behavior  in  the  presence  of  subscriber  failures  (the  re-synchronization 
problem) , 

- their  possibilities  for  carrying  out  system  reconfiguration  (redistribution  of 
system  tasks). 

CONCLUSION 

In  this  paper,  we  have  given  the  reasons  for  the  choice  of  a two-level 
hierarchical  structure  for  communication  between  relatively  autonomous  subscribers  car- 
rying out  real-time  control  in  an  environment  where  physical  damage  is  a possibility. 

The  structure  chosen  for  the  lower  level  is  a star  structure  that  in  our 
opinion  provides  the  highest  security  for  communication  between  subscribers  in  a geo* 
graphicaly  localized  cluster. 

Geographicaly  seperated  subscribers  or  clusters  may  communicate  via  an  ir- 
regular network  that  tolerates  physical  damage.  The  nodes  of  this  network  are  very 
simple  and  carry  out  signal  routing  automatlcaly . A network  structure  is  also  very  sui- 
table for  fiber-optic  technology  since  all  links  are  point-to-point  with  no  power  divi- 
sion. 

The  very  principle  of  input  port  election  together  with  node  self-checka- 
bility leads  to  a high  modularity  on  both  the  functional  level  (connectivity)  and  the 
operational  security  level  (fault  tolerance)  by  simple  paralleling  of  the  nodes. 
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The  choice  of  a communication  control  method  and  the  validation  of  the 
system  are  being  carried  out  at  several  levels  : 


- by  a discrete- time  simulation, 

- by  the  construction  of  a prototype  system, 

- by  the  application  of  the  system  to  a typical  avionic  integrated  data  processing 
structure  carrying  out  the  navigation  and  guidance  functions  £ 2 3J  . 
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PRINCIPLE 


COMMENTS 


© No  effort  is  nadc  to  avoid  coununi  cation  conflicts  Communication  is  stochastii 


Conflicts  are  detected  and  perturbed  messages  are  I Transmission  delays  are  random  and  may  be  unbounded 
retransmitted  i 


utscriber  may  only  attempt  a transmission  when 
detects  a silent  communication  medium 


The  probability  of  conflict  Is  equal  to  the  probability 
that  two  or  more  subscribers  attempt  to  start  a transnis 
sion  in  a time  interval  equal  to  the  communication  pro- 
pagation time 


contention  is  detected,  a subscriber  retrana- 
its  message  after  a randomly  selected  delay 


Retransmission  Intervals  must  be  randomly  selected 
to  avoid  regenerative  bursts  of  retransmissions 


(T)  Each  r-ubscriber  is  allocated  one  or  more  positions  In 
a cyclic  transmission  frame 

rJT)  The  faf  -ission  franc  and  the  allocated  positions  are 
represented  in  each  subscriber  by  a ROM  register  which 
is  jr„  .-ed  with  ones  in  the  corresponding  tr ansmis- 


The  order  in  which  subscribers  transmit  is  pre-determined 


’.Ms  ROM  register  is  adressed  by  a counter  that  Is 
increm-’Jited  each  time  that  an  end-of-messnge  is 

Transmission  delays  are  variable  but  bounded 
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COMMANDS  is  a COMMunicat ion  And  Navigation  Dynamic  Simulator.  This  simulator  is 
being  used  to  develop  and  validate  the  avionic  software  contained  in  Singer-Kearfot t ' s 
Class  II  Joint  Tactical  Information  Distribution  System  (JTIDS)  terminals. 

Multi-Sensor  Communication  and  Navigation  System  avionic  software  is  comprised  of 
a real-time  airborne  operating  system  ( RTAOS ) , a communicat ion  subsystem  based  on  the 
time  division  muxiplexed  access  (TDMA)  method,  a tactical  navigation  (TACAN)  subsystem, 
and  a relative  navigation  (REL  NAV)  subsystem. 

Since  this  avionic  software  was  written  in  assembly  language  there  existed  a 
very  stringent  requirement  for  a dynamic  simulator  for  both  development  and  validation 
of  the  avionic  software.  COMMANDS  was  developed  to  meet  this  requirement  for  an 
economical  tool  that  would  support  the  test  requirements  of  both  the  communication 
(TDMA)  subsystem's  high  data  rates,  and  the  complex  computational  requirement  of  the 
Relative  Navigation  System.  The  COMMANDS  simulator  is  resident  on  a mini-computer, 
and  is  physically  connected  to  the  JTIDS  Class  II  Operational  Flight  Program  terminal 
through  the  operational  input/output  I/O  devices.  This  allows  the  simulation  of  the 
avionic  box  which  is  receiving  the  same  inputs  in  the  laboratory  test  as  it  will  under 
flight  conditions. 

A trajectory  is  a prescribed  sequence  of  input  data  which  will  cause  the  avionic 
software  to  perform  the  desired  function  and  issue  specific  responses.  Validation 
of  the  airborne  software  consists  of  exercising  a set  of  trajectories  we  designed  to 
completely  encompass  the  operational  functions  deemed  testable. 

The  limitations  of  the  mini-computer  are  removed  by  dividing  trajectories  into 
a baseline  portion,  and  a real-time  closed  loop  portion.  The  baseline  portion  is 
that  unaffected  by  the  response  of  the  airborne  software.  The  baseline  trajectorv 
is  generated  off-line  and  input  to  the  COMMANDS  via  magnetic  tape.  The  real-time 
closed  loop  portion  is  dependent  on  data  from  the  OFP  airborne  computer.  Data 
transmission  acknowledge,  built-in  test  (BIT)  wraparound,  range  error  modules,  and 
status  processing  are  examples  of  items  in  this  class.  With  the  division  of  trajectory 
generation  responsibility,  the  mini-computer  can  readily  process  the  dynamic  simulator 
requirements  of  COMMANDS. 

Most  of  the  data  output  from  the  avionic  system  is  accepted  by  COMMANDS.  Some 
data  is  processed  immediately,  but  all  data  is  recorded  in  real  time  for  future  data 
reduction.  Data  correlation  is  performed  wherein  each  item  from  the  output  tape  is 
compared  parameter  by  parameter  to  the  corresponding  item  in  the  "true-world"  tape. 

This  permits  a trajectory  to  be  exercised  which  produces  many  thousands  of  data 
points.  These  data  can  subsequently  be  compared  to  acceptable  limits,  and  only  data 
exceeding  these  limits  will  be  typed  for  analytical  investigat ion . Additionally, 
the  COMMANDS  has  tested  the  complex  I/O  of  this  terminal  since  all  trajectories 
transmit  and  receive  data  over  the  operational  devices. 

The  automatic  features  of  this  development  and  validation  tool  further  enhance 
software  reliability.  Validation  depends  on  automatic  acceptance  of  data  and 
identi f ication  for  analysis  of  all  data  exceeding  the  established  error  bounds. 
Pre-defined  trajectories  are  certified  by  the  requirement  personnel  to  foster 
complete  testing  and  assure  that  trajectories  are  developed  which  encompass  all 
functional  requirements. 

Since  the  actual  I/O  is  exercised  during  these  tests,  software  performance  in 
field  tests  will  be  the  same  as  in  the  dynamic  simulator.  Finally,  this  method  is 
inexpensive  to  generate,  exercise,  and  maintain.  The  combined  effort  yields  a very 
powerful,  real-time  dynamic  simulator  for  communication  navigat ion  systems. 
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Automatic  Gain  Control  for  a TACAN  System 
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Built-in  Test  Software,  used  to  test 
flight  system 

Command  and  Control 

TACAN  System  Digital  Control 
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Dead  Reckoner  Navigator 
Display  Unit 
Helicopters 

Hewlett-Packard  Mini-Computer 

Input  or  Output  over  a communication  line 

Mode  Control  Unit 

Operational  Flight  Program 

Relative  Navigation,  a subsystem  for 
local  grid  navigation 

Radio  Frequency  Message  Processor 

Remotely  Piloted  Vehicles 

Real  Time  Airborne  Operating  System 

Hewlett-Packard  Real  Time  Executive, 
Version  I ID 

Surface-to-Air  Missile 

Tactical  Navigation  System 

Time  Division  Multiplexed  Access, 
a method  of  communication 

Time  of  Arrival  of  communication  signal 


INTRODUCTION: 


COMMANDS  is  a Communication  and  Navigation  Dynamic  Simulator.  This  simulator 
has  been  used  to  develop  and  validate  the  Avionic  Software  contained  in  Sinqer-Kearfott 1 s 
Class  II  Joint  Tactical  Information  Distribution  System  (JTIDS)  terminals. 

Multi-Sensor  Communication  and  Navigation  Avionic  Software  is  comprised  of 
four  subsystems.  A Real-Time  Airborne  Operating  System  ( RTAOS ) , a communication 
subsystem  based  on  the  Time  Division  Muxiplexed  Access  (TDMA)  method,  a TACtical 
Navigation  (TACAN)  subsystem,  and  a Relative  Navigation  (REL  NAV)  subsystem.  The 
flight  software  executes  on  an  SKC3120  which  is  a 16-bit  fractional  computer  capable 
of  supporting  64K  words  of  instruction/data  memory. 

Since  this  avionic  software  was  written  in  Assembly  Language  there  existed  a 
very  stringent  requirement  for  a dynamic  simulator  for  both  development  and  validation 
of  the  avionic  software.  COMMANDS  was  developed  to  meet  this  requirement  as  an 
economical  tool  that  would  support  the  test  requirements  of  both  the  communication 
(TDMA)  subsystem's  high  data  rates,  and  the  complex  computational  requirement  of 
the  Relative  Navigation  Subsystem. 

The  COMMANDS  simulator  is  resident  on  a mini-computer  and  is  physically  connected 
to  the  JTIDS  Class  II  Operational  Flight  Program  (OFP)  terminal  software  through  the 
operational  Input/Output  (I/O)  devices.  This  allows  the  simulation  of  the  avionic 
box  which  is  receiving  the  same  inputs  in  the  laboratory  test  as  it  will  under  flight 
conditions.  The  decision  to  host  COMMANDS  on  a mini-computer  has  both  advantages  and 
disadvantages.  The  principal  advantage  is  that  the  simulator  is  connected  to  the 
software  via  the  operational  flight  hardware.  Effects  contributed  by  delays  in 
transmission  of  data  through  the  hardware,  noise  errors  in  I/O  devices,  Airborne 
Computer  roundoff  and  truncation  errors  are  all  simultaneously  tested  within  this 
simulation  approach.  The  sole  disadvantage  of  hosting  the  simulator  on  a mini- 
computer is  that  the  mini-computer  is  not  capable  of  performing  the  required 
computations  in  real  time. 

A trajectory  is  a prescribed  sequence  of  input  data  which  will  cause  the  avionic 
software  to  perform  the  desired  function  and  issue  specific  responses.  Validation  of 
the  airborne  software  consists  of  exercising  a set  of  trajectories  we  designed  to 
completely  encompass  the  operational  functions  deemed  testable.  Some  software  is 
explicitly  tested  by  a trajectory:  e.g.,  the  Relay  Message  function  of  the  Communi- 
cation subsystem  is  tested  by  inputting  Relay  Messages.  Other  functions  are  tested 
implicitly  by  this  dynamic  simulator:  e.g. , the  matrix  multiply  routine  must  be 
correct  if  the  REL  NAV  trajectories  are  to  be  successfully  executed,  even  though  the 
matrix  multiply  itself  is  never  explicitly  tested. 

The  limitations  of  the  mini-computer  are  removed  by  dividing  trajectories  into 
a baseline  portion,  and  a real-time  closed  loop  portion.  The  baseline  portion  of 
the  trajectory  is  that  portion  unaffected  by  the  response  of  the  airborne  software. 

The  baseline  trajectory  is  generated  off-line  and  input  to  the  COMMANDS  via  a 1600bpi 
9-track  magnetic  tape.  The  real-time  closed  loop  portion  consists  of  the  functional 
capability  that  is  dependent  on  data  from  the  OFP  Airborne  Computer.  Data  trans- 
mission acknowledge,  built-in  test  (BIT)  wraparound,  range  error  modules,  and  status 
processing  are  examples  of  items  in  this  class.  With  the  division  of  trajectory 
generation  responsibility,  the  mini-computer  can  readily  process  the  dynamic 
simulator  requirements  of  COMMANDS. 

In  addition  to  off-line  baseline  trajectory  generation,  a "true-world"  magnetic 
tape  is  created.  The  "true-world"  tape  is  a frame-by-frame  prediction  of  what  the 
correct  airborne  flight  software  should  generate.  The  "true-world"  tape  is  the 
standard  to  which  the  output  of  the  OFP  software  is  compared. 

Every  item  of  data  output  from  the  avionic  system  is  accepted  bv  COMMANDS. 

Some  data  is  processed  immediately,  but  all  data  is  recorded  in  real-time  for  future 
data  reduction.  This  data  reduction  consists  of  two  phases.  First,  the  content  of 
messages  is  printed,  status  data  displayed,  and  relative  navigation  information 
presented  in  engineering  units.  Output  can  be  a printout,  or  a plot  of  the  data. 

DATA  Correlation  is  the  second  phase  wherein  each  item  from  the  output  tape  is 
compared  parameter  by  parameter  to  the  corresponding  item  in  the  "true-world"  tape. 
Associated  with  each  parameter  is  an  expected  error  range.  Parameters  which  exceed 
the  allowed  error  range  are  identified  by  parameter,  frame,  and  error  value.  Output 
of  the  data  correlation  phase  of  this  simulator  can  be  a printout,  or  a plot  of  the 
errors  discovered.  This  permits  a trajectory  to  be  exercised  which  produces  many 
thousands  of  data  points  while  all  are  thoroughly  examined  and  compared  to  acceptable 
limits.  Only  data  exceeding  these  limits  will  be  typed  for  analytical  investigation. 

COMMANDS  has  been  used  to  develop  and  validate  Multi-Sensor  software  at 
Singer-Kearfott  which  is  currently  in  Advanced  Development  and  Prototype  testing. 

The  separation  of  trajectories  into  baseline,  and  real-time  functions  was  previously 
developed  but  was  not  fully  applied  to  communication  systems  until  this  project. 
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Additionally,  the  COMMANDS  has  tested  the  complex  10  of  this  terminal  since  all 
trajectories  transmit  and  receive  data  over  the  operational  devices. 

The  COMMANDS  simulator  will  be  expanded  concurrently  with  refinements  in  the 
functions  of  the  operational  flight  software.  This  tool  will  also  be  expanded  to 
have  additional  quasi-real-time  data  reduction  features,  that  is,  expanded  ability 
to  display  reduced  data  during  quiescent  portions  of  a trajectory. 

The  automatic  features  of  this  development  and  validation  tool  further  enhance 
software  reliability.  Validation  depends  on  automatic  acceptance  of  data  and 
identification  for  analysis  of  all  data  exceeding  the  established  error  bounds. 

Pre-de fined  trajectories  are  certified  by  the  requirement  personnel  to  foster  complete 
testing  and  assure  that  trajectories  are  developed  which  encompass  all  functional 
requi  remt'nts. 

Since  the  actual  I/O  is  exercised  during  these  tests,  software  performance  in 
field  tests  will  be  the  same  as  in  the  dynamic  simulator.  Finally,  this  method 
is  inexpensive  to  generate,  exercise,  and  maintain.  The  combined  effort  yields  a 
very  powerful,  low  cost,  real  time  dynamic  simulator  for  Communication  and  Navigation 
sys terns . 
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RELATIVE  NAVIGATION  SUBSYSTEM 


The  Relative  Navigation  (REL  NAV)  subsystem  in  the  Multi-Sensor  Operational 
Flight  Program  has  been  designed  to  provide  the  capability  for  each  member  of  a 
cooperative  community  to  derive  the  benefits  afforded  by  a sensor  at  any  other 
member’s  location.  This  is  accomplished  through  the  use  of  a dual-grid  navigation 
technique.  In  addition  to  navigation  in  the  conventional  geodetic  frame,  a relative 
grid  is  established.  The  key  element  in  the  dual  grid  concept  is  the  Time  Division 
Multiple  Access  (TDMA)  ranging  and  communication  system.  Its  member- to-member  distance 
measuring  capability  provides  the  precise  ranging  information  necessary  to  lock  each 
member  in  a common  yet  arbitrary  relative  navigation  grid,  while  its  communication 
capability  provides  the  means  for  dissemination  of  sensor  data. 

The  Relative  Navigation  (REL  NAV)  capability  affords  members  of  the  same 
community  the  ability  to  acquire  targets  and  share  the  target  sensor  data  for  all 
grid  members,  effect  rendezvous,  exchange  position  data  and  deliver  weapons  effectively 
and  accurately.  Accurate  relative  navigation  within  a community  implies  that  there 
exists  azimuthal  as  well  as  position  and  time  correlation  among  the  community  members. 
That  is,  any  member  possesses  the  navigation  accuracy  to  touch  any  other  member  with 
an  imaginary  stick,  or  perhaps  more  signi f icantl y to  touch  any  arbitrary  point  in  the 
tactical  region  that  another  member  is  touching.  Each  member  positions  himself  in 
the  relative  qrid  as  well  as  aligning  the  axes  of  the  relative  grid  to  a common  azimuth. 

No  community  member  represents  an  independent  entity,  but  rather  is  an  integral 
part  of  a network  of  users  linked  together  by  the  precise  RF  ranging  system.  Relative 
position  is  known  so  well  that  this  network  of  members  can  be  thought  of  as  one  hybrid 
naviga t ion/weapon  delivery  system  with  distributed  sensors.  The  single  relative 
grid  provides  a measurement  base  in  which  the  precise  exchange  of  target  sensor  data 
occurs  (e.g.,  radar  target  data).  For  combat  considerations  this  means  that  target 
positions  as  well  as  navigation  sensor  data  and  other  points  of  interest  can  be 
exchanged  among  members  of  the  community  without  significant  loss  of  precision.  This 
same  relative  grid  which  links  all  cooperative  members  allows  for  the  distribution  of 
precise  geographic  position  data  (e.g.,  GPS  data)  as  well  as  the  mutual  augmentation 
of  different  distributed  geographic  navigation  sensors,  just  as  if  they  were  located 
on  the  same  vehicle  (e.g.,  a doppler  on  one  vehicle  being  utilized  with  an  inertial 
system  in  a second  vehicle  to  provide  a hybrid  doppler  inertial  capability) . Members 
carrying  different  sensors  and  sensor  types,  with  different  error  signatures,  augment 
each  other  to  provide  a hybrid  system  which  is  more  accurate  than  any  single  system 
element  alone. 

The  software  mechanization  for  the  dual  grid  navigation  consists  of  a Kalman 
filter  which  models  those  independent  states  necessary  to  develop  two  complete  sets 
of  navigation  parameters;  a relative  set  and  a geographic  set.  Of  utmost  importance 
here  is  the  fact  that  the  pilot  does  not  become  involved  with  any  of  this  data.  The 
seemingly  complex  decision  as  to  which  grid  to  use  for  any  given  problem  is  transparent 
to  the  pilot.  He  is  not  required  to  make  real-time  selections  of  position  or  any 
other  data.  The  system  is  programmed  to  address  he  selection  of  which  grid  information 
should  be  utilized.  The  relative  navigation  coordinates  which  are  available  as  filter 
outputs  are  utilized  for  relatively  derived  target  data,  whereas  the  geographic 
position  outputs  are  used  for  geographically  designated  targets. 

The  concept  of  having  to  select  from  two  different  sources  of  position  is  not 
new  to  the  weapon  delivery  software  designer.  Most  tactical  aircraft  are  equipped 
with  both  a radar  altimeter  and  a baro-al timeter , one  providing  relative  (ground 
referenced)  altitude,  the  other  providing  a measurement  of  absolute  (sea  level 
referenced)  altitude.  The  use  of  two  altimeters  with  the  associated  question  of 
which  to  use  at  any  given  time  is  well  understood  and  the  application-related 
solution  taken  for  granted.  Use  of  the  dual  grid  data  is  no  more  complex  than  this. 

In  a direct  air-to-ground  attack  of  a target  acquired  by  the  aircraft's  own  radar, 
the  software  establishes  its  own  local  relative  grid  for  navigation  to  determine  when 
to  release  the  weapon.  Since  it  is  a relative  problem  use  of  geographic  position 
directly  is  meaningless.  In  addition,  any  updates  to  the  geodetic  svstem  received 
during  that  time  would  be  ignored  insofar  as  the  position  computation  is  concerned. 

Over  the  short  period  of  time  (approximately  5 to  10  seconds)  from  target  designation 
to  weapon  release,  the  integral  of  dead-reckoner  velocity,  with  its  inherent  short 
term  stability,  represents  the  best  estimate  of  position  change. 

This  single  aircraft  example  is  analogous  to  the  community  problem  where  the 
target  is  acquired  using  the  radar  on  one  member's  aircraft,  and  this  target  must 
subsequently  be  attacked  by  another  member  aircraft.  Using  the  relative  grid 
coordinates,  the  first  aircraft  can  accurately  transmit  the  location  of  the  target 
to  the  second  aircraft,  just  as  though  the  radar  had  been  mounted  on  that  second 
aircraft.  The  second  aircraft  can  then  attack  the  target  continuing  to  navigate 
using  the  same  common  relative  grid.  Any  geodetic  navigation  position  observations 
processed  during  this  time  will  not  impact  the  relative  navigation  solution.  This 
is  accomplished  by  the  dual  qrid  capability  afforded  by  the  terminal  where  navigation 
is  essentially  independent  between  the  two  coordinate  frames  or  grids.  Updates  to 


the  geographic  system  will  correct  the  geographic  position,  but  will  not  cause  short 
torn-,  decorrelation  of  position  data  in  the  relative  grid  frame. 

A second  example,  again  beginning  with  the  conventional  single  aircraft  case, 
can  be  utilized  to  demonstrate  when  position  data  from  the  geographic  frame  would 
yield  better  results.  A target  is  designated  by  a forward  observer  using  geographic 
map  coordinates.  An  attack  on  such  a geographically  designated  target  should  be 
made  based  on  the  aircraft's  best  available  geographic  position.  All  geographic 
position  updates  available  prior  to  the  attack  would  be  utilized  to  improve  his 
estimate  of  geographic  position  and  compute  a more  accurate  weapon  release  point. 

Similarly,  if  this  forward  observer  information  is  received  by  a community  member 
equipped  with  the  dual  grid  navigation  capability  of  the  communication  (TDMA)  terminal, 
that  member  aircraft  would  also  use  his  best  estimate  of  geographic  position.  By 
utilizing  data  from  the  geographic  grid,  he  automatically  receives  the  community's 
best  estimate  of  geographic  position,  which  has  been  derived  using  essentially  all 
geographic  update  information  available  to  each  of  the  community  members. 

APPLICATIONS 

The  applications  of  the  TDMA  system  take  advantage  of  several  distinct  features 
which  are  integral  to  the  communication  terminal.  Certainly  the  relative  navigation 
capability,  especially  with  the  dual  grid  navigation  just  described,  is  extremely 
versatile.  This  capability  becomes  even  more  powerful  when  utilized  with  the  data 
link  of  the  TDMA  system  and  the  inherent  time  synchronization  of  all  participating 
community  members.  The  following  examples  illustrate  the  use  of  several  of  these 
features . 

MISSILE  GUIDANCE  AND  CONTROL 

The  utilization  of  a TDMA  terminal  for  missile  guidance  and  control  is  parti- 
cularly efficient.  There  is  a significant  savings  which  results  from  the  fact  that 
the  basic  TDMA  link  can  provide  the  time  of  arrival  (TOA)  signals,  which  will  allow 
for  computation  of  the  target  missile  (SAM)  relative  position  as  well  as  being  used 
as  the  link  for  guidance  commands. 

A typical  scenario  is  depicted  in  Figure  1 where  the  target  missile  is 
detected  by  airborne  and  seaborne  elements  which  are  operating  in  the  grid:  1)  The 
target  position  is  fixed  in  the  grid  based  on  the  detection  elements,  A,  B,  and  C. 

2)  A TDMA  command  and  control  (C&C)  member  (C)  is  assigned.  3)  Guidance  plane 
information  may  be  developed  based  on  the  selected  launcher  position  and  an  extra- 
polated target  position.  4)  The  SAM  launcher  vehicle  (B)  is  selected.  5)  Command 
and  guidance  data  may  be  transmitted  to  the  SAM  from  the  C&C  ship.  6)  The  SAM 
will  respond  to  these  commands  signals  and  provide  TOA  signals  to  the  airborne 
elements.  7)  The  TOA  signals  then  may  be  retransmi tted  to  the  C&C  ship.  8)  Upon 
reception  of  the  SAM  TOA  signals,  the  C&C  ship  develops  the  SAM  position  in  the 
TDMA  grid. 

Based  on  the  position  in  the  grid,  new  guidance  vector  commands  may  be  computed 
and  transmitted  over  the  same  data  link  for  SAM  guidance.  If  the  SAM  possesses  a 
terminal  sensor,  then  TDMA  guidance  need  only  continue  to  place  the  SAM  within  the 
acquisition  "basket"  of  the  terminal  sensor. 

Other  SAM  scenerios  are  somewhat  similar  and,  in  fact,  may  operate  with  a 
passive  system  aboard  the  SAM.  Then  the  SAM  position  may  be  established  by  tracking 
by  TDMA  community  members,  as  was  the  target  for  the  scenario  presented. 


TARGET  DETECTION 


POST  LAUNCH 


COMMAND  AND  CONTROL  TRANSMISSION  TO/FROM  SAM 


1)  RADAR  ILLUMINATION  & DETECTION 


2)  TRANSMIT  TARGET  MEASUREMENT 

IN  TDMA  GRID  TO  COMMAND  AND  CONTROL 


5)  COMMAND  t»  GUIDANCE  DATA 


6)  SAM  RESPONSE  TO  COMMAND 


P RELAUNCH 


7)  TRANSMIT  TO A SIGNALS  TO 
ASSIGNED  TDMA  COMMAND  & 
CONTROL  MEMBER 


GUIDANCE  PLANE  IN  TDMA 
COORDINATES  BASED  UPON 
EXTRAPOLATED  TARGET  BY  C&C 


8)  DEVELOP  INTERCEPTOR  MISSILE  POSITION 


4)  SELECT  MISSILE  SHIP  AND  LAUNCHER 


/SAM 

\ / INTERCEPTOR 


TARGET 


pP 





MISSILE  GUIDANCE  AND  CONTROL 


FIGURE  1 


AD-A065  928  ADVISORY  GROUP  FOR  AEROSPACE  RESEARCH  ANO  DEVELOPMENT— ETC  F/G  1/3 

THE  IMPACT  OF  INTEGRATED  6UIDANCE  AND  CONTROL  TECHNOLOGY  ON  HE A— ETC <U) 
DEC  78 

AGARD-CP-257  nl 


UNCLASSIFIED 


23-8 


intelligence  gathering  and  dissemination 

These  activities  can  be  described  as  requiring  signal  intercept,  selection  of 
significant  or  correlated  signals,  providing  emitter  locations  where  possible, 
iden ti f ication  of  emitter  type,  correlating  data  and  reporting  to  command. 

As  part  of  the  emitter  location  process,  it  is  advantageous  to  utilize  the 
high  accuracy  relative  navigation  capability  provided  by  TDMA  especially  for 
redundant  reception  of  emitter  transmissions  and  the  subsequent  correlation  of  the 
data.  Another  extremely  important  feature  in  terms  of  data  correlation  is  provided 
by  the  ability  to  "time  tag"  data  accurately  for  processing  and  correlation  with 
data  from  other  sources.  The  secure  data  distribution  capability  of  this  system  is, 
of  course,  important  for  communications  with  other  operational  elements. 

RPV/DRONE  CONTROL  AND  GUIDANCE 

Although  missile  guidance  techniques  utilizing  Distance  Measuring  Equipment  ( DME ) 
and  signal  Time  of  Arrival  (TOA)  measurements  are  not  new,  a TDMA  compatible  terminal 
offers  great  simplicity  over  current  systems.  Utilizing  the  TDMA  tactical  link,  a 
complete  dedicated  separate  guidance  link  and  system  is  not  required. 

A TDMA  terminal  is  also  applicable  to  Remotely  Piloted  Vehicles  (RPV) . A 
simplified  terminal  would  provide  the  A/J  data  link  and  relative  navigation  capability 
for  both  the  missile  and  RPV  application. 

There  are  a full  range  of  terminal  versions  to  meet  a spectrum  of  vehicle 
applications.  For  simple  low-cost  glide  weapons,  a basic  terminal  is  ideal  as  it 
exhibits  a balance  between  basic  guidance  features  and  low  cost.  For  more  capable 
glide  weapons  and  air-to-ground  missiles,  additional  terminal  capabilities  can  be 
added  such  as  a terminal  with  an  additional  receiver,  thereby  enhancing  the  anti- jam 
properties  of  the  basic  configuration. 

Finally,  for  more  sophisticated  vehicles  with  the  capability  for  self-contained 
guidance,  a different  terminal  is  in  order.  This  is  a fully  passive  terminal 
(without  transmission  capability).  Since  it  does  not  transmit,  it  is  a more  secure 
terminal  but  it  must  now  synchronize  itself  passively  into  the  TDMA  slot  structure. 
Relative  missile  location  is  now  computed  on  board  the  missile  from  the  TDMA  position 
reports  of  the  other  tactical  net  members. 

Typical  operation  of  this  terminal  is  as  follows:  (Figure  2)  A message  (for 
example,  an  RPV  command)  is  transmitted  over  a predetermined  missile  slot.  This 
message,  complete  with  synchronization  and  header  information,  is  received  and 
recognized  by  the  terminal.  A reply  signal  is  assembled  containing  externally 
supplied  data  (targetting,  etc.)  or  a fixed  ranging  reply.  This  reply  message  is 
then  transmitted  to  the  command  ship  either  directly  or  through  a relay  aircraft 
or  RPV  after  a fixed  time  delay.  On  the  command  ship,  relative  navigation  computa- 
tions are  performed  upon  the  receipt  of  TOA  data,  thereby  placing  the  RPV  in  a 
relative  grid.  Command  information  is  then  uplinked  to  the  RPV  in  the  next  chosen 
TDMA  time  slot  and  the  process  repeated.  Note  that  for  navigation,  two  other  net 
members  are  shown  (Helos).  They  are  not  required,  however,  if  relative  navigation 
is  not  to  be  performed  by  TDMA  equipment.  Also,  they  are  not  required  if  relative 
navigation  is  to  be  performed  in  a single  update  mode. 
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AUTONOMOUS  OPTION  FOR  NAVIGATION 

For  certain  mission  applications  it  may  be  desirable  for  the  RPV  to  remain  silent 
until  reaching  the  terminal  area.  This  requirement  can  be  met  by  utilizing  autonomous 
navigation  capability  with  the  TDMA  terminal.  This  is  a feature  which  already  exists 
in  the  Class  2 terminal,  which  has  been  developed  by  the  Singer-Kearfott  Division. 

A form  of  relative  navigation  is  performed  by  the  RPV  terminal.  Once  the  terminal 
is  synchronized  into  the  TDMA  slot  structure  accurate  range  measurements  are  performed 
in  the  RPV  terminal  (passively).  Relative  navigation  processing  of  these  measurements 
permits  the  RPV  to  place  itself  in  a relative  tactical  grid  continuously  during  flight. 
Navigation  and  hence  guidance  computations  are  performed  in  the  RPV  in  a completely 
self-contained  fashion. 

There  are  several  reasons,  however,  why  this  capability  may  not  be  worth  the  extra 
complexity.  First,  the  ship  must  periodically  radiate  a transmission  to  the  RPV  for 
relative  navigation.  This  radiation  may  be  detected  by  unfriendly  vehicles  (provided 
they  are  within  line-of-sight  range).  In  the  simpler  active  terminal,  the  RPV  must 
radiate  to  the  ship  which  then  performs  the  guidance  computations.  However,  this 
radiation  is  aimed  toward  friendly  forces  and  away  from  unfriendly  forces.  Since  the 
ship  retains  the  command  function  and  has  greater  data  processing  capability,  it  makes 
sense  to  place  the  navigation  and  guidance  authority  here  as  well. 

For  comparative  purposes,  Figure  3 indicates  the  data  flow  in  an  autonomous 
mode.  As  shown  in  this  figure,  one  way  transmissions  are  made  from  one  or  more  TDMA 
net  members  to  the  RPV.  These  transmissions  consist  of  normal  TDMA  Position  messages 
(containing  position,  velocity,  heading,  information).  The  RPV  accepts  these  messages 
by  listening  and  decoding  the  data  in  each  assigned  vehicle  slot,  then  performs  relative 
navigation  computations  and  locates  itself  in  a relative  grid.  This  location  technique 
is  superior  to  simple  multi lateration  techniques  as  it  is  based  upon  optimally 
filtering  both  range  (TDMA  derived)  and  dead  reckoning  derived  data.  Furthermore, 
with  this  technique  (unlike  multilateration) , TDMA  range  measurements  can  be  processed 
at  various  non-synchronous  times.  It  is  this  fact  that  permits  relative  navigation 
to  operate  on  a "single  range  update"  basis,  i.e.,  updated  navigation  between  only 
two  TDMA  net  members.  With  the  singular,  non-autonomous  RPV  terminal  previously 
described,  navigation  and  guidance  computations  are  performed  aboard  the  command  ship 
and  are  based  upon  TOA  multilateration  computations. 
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HI' LAY  on: RATION 

Each  airborne  terminal  contains  the  provision  for  relay  operation.  At  TPMA 
frequencies,  transmission  is  solely  by  1 ine-of -sight . To  achieve  over-the-horizon 
operation  with  a low  tlying  RI’V , a relay  operation  is  probably  required.  Figure  4 
demonstrates  this  type  of  operation. 

Ranging  and  sensor  data  transmitted  by  the  RFV  are  received  by  the  relay  terminal. 
This  data  may  then  be  re- transmitted  as  shown  in  Figure  4 in  a pre-determined  relay 
slot  for  reception  by  the  command  ship.  By  the  same  token,  a TPMA  terminal  (e.g. , 
in  another  RI’V)  also  can  be  used  as  a relay. 

For  the  over-the-horizon  RPV,  TPMA  capabilities  supplying  secure  data  transmission 
and  navigat it. a seem  to  be  a natural  choice.  The  ability  to  handle  high  data  rates, 
multiple  users,  and  supply  an  inherent  flexibility  adaptable  to  different  mission 
scenarios,  all  seem  to  enhance  TPMA  appl icabi 1 i ty  to  tins  problem. 
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Si:  ARCH  AND  RESCUE  OP  {'.RATIONS 


The  Search  and  Rescue  Operation,  although  involving  two  segments  to  the  operation, 
requires  a high  degree  of  coord inat ion , data  transfer  and  common  navigator  accuracy 
tor  the  fulfillment  of  the  mission.  It  is,  in  many  respects,  quite  similar  to  an  ASW 
mission  which  requires  Si: ARCH  and  then  handoff  of  a target,  for  ASW,  or  of  friendly 
and  enemy  personnel  for  RESCUE.  It  is  extremely  important  for  the  search  vehicles  to 
be  able  to  lock  a rescue  target  in  the  same  grid  as  that  used  by  the  rescue  vehicle, 
if  it  is  not  on  search  during  the  search  operation. 

The  TPMA  equipment  may  bo  used  to  advantage  t o i this  mission  in  that  different 
terminals  on  various  types  of  vehicles  or  terminals  used  in  conjunction  with  a 
sonobouy  will  all  be  inter-operable.  This  inter-operability  of  terminals  is  important 
and  fortuitous  since  the  type  of  different  vehicles  used  for  search  and  rescue 
operations  may  be  quite  vaiied  depending  on  the  nature  of  the  operation  and  the 
availability  of  vehicles  on  location. 

TARC.KTTINC.  USINC.  PISTRIBUTFP  SENSORS 


Targcttinq  may  be  accomplished  using  the  TPMA  terminal  by  either  passive  monitoring 
of  an  emitter  or  by  active  radar  threat  verification. 

Figure  *>  depict*;  a Target  emitting  energy  in  search  of  a task  force  (or  ground 
ins tal lat ion) . Airborne  TPMA  community  members  receive  this  energy  transmission  anil 
time  tag  it  using  the  TPMA  synchronized  time.  A designated  Command  and  Control  unit 
thu  computes  \ he  emitter  location. 

Figure  i<  sh  >ws  .»  situation  in  which  members  may  verify  a threat  by  illuminating  a 
target.  The  ret  ect ion  may  be  utilized  by  the  illuminating  aircraft  (A)  as  well  and 
by  other  passive  elements  (B  and  C)  in  order  t o provide  emitter  location  information. 

The  utilization  of  the  distributed  sensor  concept  in  conjunction  with  a precisely 
defined  relative  grid  m.l  synchronized  time  from  the  TPMA  system  provides  a wide  range 
of  application  oriented  capabi 1 i t ies , heretofore  not  available  to  cooperative 
community  operation. 

These  concepts  may  be  utilized  to  provide  smaller  target  acquisition  baskets  while 
providing  increased  survivability  by  decreasing  radar  on-time. 


A system  of  this  sophistication  with  its  high  data  rate  communications  and  complex  state- 
of-the-art  dual  grid  Kalman  filter  analytics  requires  dynamic,  automated  validation 
\z  techniques  to  assure  the  inteqrity  of  the  software.  This  has  motivated  the  development 
of  the  COMMANDS  facility. 

The  remainder  of  this  paper  details  three  aspects  of  the  COMMANDS  system.  These 
aspects  are: 


o Closed-Loop  Real  Time  Software 
o Baseline  Software 
o Hardware  Configuration 
REAL  TIME  CLOSED  LOOP  SOFTWARE 


The  Real  Time  closed  loop  portion  of  the  COMMANDS  simulator  has  been  designed  to  execute 
on  a Hewlett-Packard  HP21MX  computer.  The  functions  of  this  software  are  summarized 
as  follows: 

a)  Execution  of  bead  Reckoner  (D/R)  Navigation  Model 

b)  Execution  of  TACAN  Model 

c)  Execution  of  TDMA  and  Radio  Frequency  (RFJ  Message  Processing 

d)  Execution  of  Port  Processing  for  the  terminal's  message 
communication  ports. 

The  Input-Output  portion  of  the  Real  Time  Closed  Loop  Software  consists  of  buffers 
whose  functions  are  to  initialize  output  to  the  flight  computer;  to  act  as  interface 
between  the  baseline  generated  magnetic  tape  and  the  flight  computer;  to  record  all 
data  for  subsequent  data  reduction;  to  record  the  status  of  the  COMMANDS  simulator  and 
the  Flight  Software  under  test,  and  to  contain  error  codes. 

BASELINE  SO F TWA RE 


The  baseline  programs  are  written  in  ANSI  FORTRAN  and  are  primarily  designed  to  be 
executed  on  the  IBM370.  Versions  of  the  data  reduction  programs  are  written  in  Hewlett- 
Packard  FORTRAN  to  be  exercised  on  the  HP-21  MX  computer  operating  under  the  Hewlett-Packard 
Real  Time  Executive  ( RTF- 1 1 B ) on  the  COMMANDS  facility  itself.  The  programs  operating 
on  the  HP-21MX  are  functionally  equivalent  to  and  conditionally  portable  with  their 
counterparts  which  operate  on  the  IBM370. 

The  baseline  programs  generate  a time  associated  data  base  for  use  as  input  to  the 
Closed  Loop  Software.  The  program  calculates  true  geographic  and  relative  grid  positions 
for  the  test  vehicle  and  other  community  members.  It  provides  ranges  between  the  OFr 
vehicle  and  the  members  including  simulated  slot  jitter,  TOA  error  and  blackout  conditions. 
The  program  maintains  the  community  time  of  day  and  provides  for  discrete  step  changes 
in  a large  variety  of  parameters  including  coarse  sync  indicators,  RTT  range  and  SRN, 
oscillator  and  power  amplifier  ready  indicators,  geographic  update  parameters,  slot 
jitter,  TOA  error,  fixed  format  message  headers,  initialization  data,  message  repetition 
rates,  internal  message  fields,  polling  and  machine  acknowledge  events  and  fee  text 
message  changes. 

The  program  provides  simulated  fixed  format  position  messages  received  from  the 
community  members  mentioned  above  in  addition  to  fixed  format  messages  from  any  other 
community  member.  In  addition,  it  provides  free  text  received  messages.  All  emulated 
received  messages  have  associated  with  the  messages  erroi  indications  including  code 
error  counts,  erasure  count  and  check  on  inner  code  parity.  The  received  Position- 
messages  are  also  time  synchronized  vis  to  internal  position  data,  time  slot  number  and 
range.  The  program  supplies  simulated  input  data  from  both  the  fixed  format  and  free 
text  portion  including  both  control  and  message  data,  and  simulated  TACAN  signal  data 
representing  a range  and  bearing  model  implementation.  It  provides  for  periodic 
signal  blanking  DC,  AGC  lock  unlock  condition  an.!  vilid  invalid  indications.  Also 
implemented  is  a simulated  co-channel  signal  interference  mode.  The  program  simulates 
(in  conjunction  with  the  real  time  Closed  Loop  Software)  the  inertial  dead-reckoning 
unit  and  provides  data  for  the  navigation  port  interface. 

The  baseline  program  generated  data  base  is  supplied  to  the  Real  Time  Closed  Loop 
Software  via  a magnetic  tape.  Inputs  to  the  Baseline  program  art'  via  a standard  1BM370 
format  card  deck. 

COMMANDS  HARDWARE 


This  section  describes  the  function  and  interrelation  of  the  hardware  components 
in  the  COMMANDS  simulator.  Figure  7 is  a diagram  showing  the  interaction  of  these 
components . 

The  COMMANDS  system  consists  of  a central  computer  and  associated  peripheral 
equipment . 

COMMANDS  simulates,  in  real  time,  all  the  data  normally  received  by  the  OFF  under 
actual  flight  conditions.  In  addition,  the  computer  continuously  checks  the  OFF*  output 
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data  and  produces  appropriate  leuponsos,  and  ot  adjusts  the  simulated  data  as  tequited. 
Actual  tliaht  conditions  are  simulated  by  eleven  test  cases  which  are  designed  to  check 
all  comb  mat  ions  of  the  mu  jor  funct ions  to  be  performed  by  the  OFP.  This,  then,  provid 
a complete  val  idat  ion  ot  the  fliuht  software  in  the  laboratory  prioi  to  fliuht  testinu. 
The  trajectory  driver  tape  is  mounted  on  one  tape  drive  while  the  othei  drive  is  used 
for  recording  the  OFP  output.  Other  peripherals  used  ate: 


o CRT  I 0 Terminal 


provides  the  means  tot  entering  some  proa  ram 
initialization  data,  as  well  as  examining 
data  on  the  OFP  output  tape. 


o Cat  t t i due  Pi  sk  l»n  1 1 


stores  the  software  needed  in  the  operation 
ot  t he  t est  st  at  ion . 


produces  a hard  copy  ot  the  output  t tom 
tin*  fliuht  computer. 


The  Operational  Fliuht  Software  Test  Sot  handles  the  data  flow  between  the  OFP, 
tin*  COMMANDS  simulator,  and  the  Display  Unit  (DU).  The  Test  Set  controls  the  eommuni- 
cat ions  between  the  OFP  and  DU  and  al lows  them  t o operate  independent  of  tin*  external 
test  computet.  In  addition,  the  Test  Set  provides  controls  that  simulate  the  Mode 
Control  Unit  (MCU)  functions.  The  Test  Set  provides  all  necessary  clocks  and  a real- 
time  interrupt  tv*  all  external  devices. 


i * * • 

Control  Unit  (MCU)  functions, 
t ime  interrupt  to  all  external 


In  conclusion  the  COMMANDS  system  offers  a reliable  low  cost  mechuni zat ion  that 
provides  tot  the*  thorouuh  verification  ot  flu*  Airborne  Fliuht  Software. 
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1 . 0 INTRODUCTION  ^ ^ } 

This  paper  describes  the  basic  RF  homing  missile  guidance  simulation  problem  and  solutions 
that  have  evolved  over  the  past  20  years.  Starting  from  simple  component  transfer 
function  measurements  in  the  late  1 940  ‘ s and  early  1 950's,  the  evolution  of  RF  homing 
guidance  simulation  techniques  is  followed  to  present  day  ha r dwa r e - i n- t he- 1 oop  facilities 
at  Boeing,  the  United  States  Army's  Radio  Frequency  Simulation  System  (RFSS),  and  the 
United  States  Navy's  Central  Target  Simulator  (CTS). 

1 . 1 Why  Simulate? 

Simulation  is  performed  because  it  is  an  effective  management  and  engineering  tool  for 
analysis,  development  and  test.  Missile  guidance  systems  have  become  too  complex  to  be 
adequately  developed  and  evaluated  by  reliance  on  limited  analytical  simulations  and 
sparse  flight  test  programs.  Managers  are  expected  to  make  difficult  decisions  with 
increasing  risk  based  upon  decreasing  technical  data  at  key  program  milestones.  Yet 
program  costs  continue  to  climb  and  accelerate,  further  complicating  the  manager's 
decisions  dilemma.  Ha rdwa re- i n- the- 1 oop  missile  guidance  simulations  can  provide 
meaningful  answers  to  tough  system  questions. 

There  is  also  a large  financial  advantage  in  using  simulation  over  actual  flight  tests; 
for  example  the  Army  recently  performed  3000  Simulated  flights  in  three  weeks  at  a cost 
of  $100,000.  Comparable  actual  missile  flights  could  have  cost  at  least  $140,000,000 
for  the  missiles  alone  and  taken  at  least  two  years  to  perform. 

Technically  such  a simulation  capability  provides  a means  to  perform;  (1)  a reduction 
in  development  time  and  failures  for  new  guidance  and  cou n ter - gu i da nc e system  designs, 

(2)  preflight  simulation  to  ensure  that  the  proposed  missile  flight  test  is  within  the 
capability  of  the  weapon  system,  (3)  post  flight  simulation  to  exactly  characterize  a 
flight  anomaly,  and  (4)  simulate  the  effect  of  aging  components  to  determine  the  per- 
formance of  the  "wooden"  missile  as  a function  of  storage  time,  (5)  a thorough  mapping 
of  the  missile  performance  envelope  in  a controlled  environment,  (6)  support  throughout 
the  life  cycle  of  the  missile  system.  S i gn  i f i ca  n 1 1 y ha  rewa  re  - 1 r.  - 1 he  - 1 oop  simulations 
bridge  the  gap  between  analytical  simulation  and  flight  testing. 

! . 2 Major  RF  Guidance  Simulation  Facilities 

The  RF  homing  missile  guidance  and  control  simulation  problem  is  to  realistically  create 
an  RF  target  and  background  environment,  subject  the  RF  homer  to  this  environment,  close 
a missile  guidance  loop  around  this  RF  homer,  perform  real-time  ha r dwa re - i n- 1 he- 1 oop 
giudance  tests  which  result  in  miss  distances  the  same  as  actual  missile  test  flights. 

Early  simulation  techniques  were  done  on  a piecemeal  basis.  Tests  were  run  on  motors, 
wind  tunnel  tests  were  performed  for  aerodynamic  information,  open  loop  RF  homer  tests 
were  performed,  measurements  were  made  of  targets  and  all  were  then  mathematically 
modeled;  these  models  were  then  put  in  an  analog  computer  and  a m i ss i 1 e- ta rge t engagement 
scenario  flown.  The  primary  output  was  the  system. miss  distance.  This  was  characteristic 
of  the  period  up  to  the  middle  1 960 ' s . 

In  the  middle  of  the  !960's  Boeing  developed  it's  Terminal  Guidance  Laboratory  (TGL). 

This  laboratory  employs  a 25'  X 25'  X 50'  anechoic  chamber,  a 16'  X 16'  electronically 
steerable  target  array  at  one  end  of  the  chamber  and  a. full  scale  hydraulic  flight 
table  to  hold  the  missile  homer  at  the  other  end  of  the  chamber.  This  laboratory  was 
used  to  make  direct  comparisons  between  actual  missile  flights  and  simulated  flights.  The 
results  demonstrated  the  validity  of  this  type  of  simulation. 

In  1975  the  U.  S.  Army's  Radio  Frequency  Simulation  System  (RFSS)  became  operational, 
and  the  characteristics  of  this  facility  are  described  along  with  some  representative 
tests.  This  facility  is  the  most  sophisticated  of  it's  kind  in  the  free  world. 

In  1980  the  U.  S.  Naval  Research  Laboratory  will  bring  on-line  their  Central  Target 
Simulator  (CTS),  and  the  general  characteristics  of  this  facility  will  be  described. 

Finally,  a look  will  be  taken  at  the  future  including  the  exciting  new  radiometric  and 
millimeter  RF  homing  simulator  area  which  is  important  for  new  applications  such  as 
anti-tank  missiles. 

2 . 0 RF_  HOMING  MI  SSI  l L GUI  DANCE  AND  CONTROL  SIMULATION  PR0BJ  EMS 

Modern  day  RF  homing  missiles  must  operate  in  an  e 1 ec t roma gne t i c environment  characteri- 
zed by  maneuvering  targets,  multiple  targets,  background  clutter,  multipath  and  ECM. 

Figure  2.0-1  illustrates  this  for  an  active  air-air  RF  homing  missile. 

2 1 Single  Maneuvering  Target 

This  target  situation  is  characterized  by  rapidly  changing  target  kinematics  and  radar 
signature.  As  the  target  maneuvers  prior  to  intercept,  it  will  present  a different 
aspect  to  the  RF  homer  and  it's  basic  signature  will  change.  The  signature  will  undergo 
wide  variations  in  amplitude  due  to  the  changing  aspect  of  the  target  with  respect  to 
the  RF  homer.  Target  angular  glint,  amplitude  scintillation,  and  radar  crosssection  all 
change  in  a dynamic  manner  during  the  target  maneuver. 
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• PLAN  VIEW 


2.2 


Multipath 


A low  altitude  target  gives  rise  to  an  image  phenomena  shown  in  Figure  2.2- 1.  Some  of  J 'j 
the  RF  guidance  signal  energy  bounces  off  the  target  onto  the  sea  (or  ground)  and  gives 
rise  to  an  apparent  target  flying  under  the  sea  at  a distance  equal  to  the  real  aircraft's 
distance  above  the  sea.  The  guidance  problem  occurs  when  the  missile  has  to  choose 
one  target  or  the  other.  This  transition  occurs  when  the  missile  closes  in  range  to 
the  point  where  both  targets  are  no  longer  in  the  homer's  antenna  beam,  and  the  missile 
has  to  choose  one  target  or  the  other.  This  is  a very  difficult  choice  and  is  frequently 
made  so  late  in  the  intercept  that  the  miss  distance  is  significantly  greater  than 
that  for  a single  target. 

2 . 3 Multiple  Target s 

Two  or  more  targets  in  close  formation  have  a vastly  different  target  signature  than  a 
single  target.  At  ranges  where  the  two  targets  are  not  resolved  by  the  homer's  antenna 
(Figure  2.3-1),  the  apparent  target  centroid  or  homing  point  can  be  well  outside  an 
imaginary  sphere  containing  both  targets,  ’his  is  due  to  the  individual  signals  from  each 
target  interfering  with  each  other  in  the  homer's  signal  processing  system.  As  the  targets 
cannot  keep  perfect  formation  their  return  signals  alternately  add  and  subtract  as  the 
targets  "jockey".  This  gives  rise  to  large  angular  glint  and  amplitude  scintillation. 

2 . A Clutter 

Figure  2.4-1  shows  both  sidelobe  clutter  and  main  beam  clutter.  Clutter  is  a much 
stronger  signal  than  the  target,  and  will  mask  the  target  unless  some  method  of  clutter 
suppression  is  employed  in  the  homer.  Range,  angle,  and  velocity  gating  are  the  common 
methods  employed.  Thus  the  clutter  environment  has  extensions  in  both  space  and  time 
which  must  be  simulated. 

2.5  EC M 

Figure  2.6-1  shows  the  ECM  situation  typical  of  today's  mi ss i 1 e- target  encounters. 

The  se 1 f - sc reen i ng  cf  jammer  (SSJ)  is  effective  when  the  target  is  within  the  main  beam 
of  the  homer  antenna.  The  target  generates  deceptive  signals  (by  various  means)  which 
make  the  homer  believe  the»*e  are  other  targets  displaced  in  angle  or  range  from  the 
actual  target. 

The  se 1 f- sc reen i ng  jammer  makes  the  deceptive  targets  stronger  in  signal  amplitude  than 
the  real  target  return  and  thus  make  them  appear  more  attractive  to  the  homer. 

Another  general  type  of  ECM  is  denial  ECM  in  which  a standoff  jammer  (SOJ)  generates 
signals  which  are  much  stronger  than  the  real  target  return  which  hides  the  real  target 
from  the  homer. 


In  summary,  the  accurate  dynamic  simulation  of  these  environments  in  space,  time 
and  frequency  is  the  central  RF  homer  missile  guidance  and  control  problem.  The  next 
section  covers  the  early  attempts  at  simulating  these  environments. 

3 . 0 Early  Simulation  Techniques 

Early  simulation  techniques  (circa  194^  to  1 a 6 5 ) are  characterized  by  the  methodology 
depicted  in  Figure  3.0-1.  Motor  tests  were  run  and  from  the  test  resutls  mathematical 
models  were  developed  of  the  missile  propulsion  performance;  wind  tunnel  tests  were 
performed  and  mathematical  models  were  developed  of  the  aerodynamic  performance  of  the 
missile;  homer  tests  were  performed  against  simulated  targets  and  mathematical  models 
developed  for  the  homer  acquisition  and  homer  tracking  performance;  and  target  radar 
signatures  were  measured.  All  of  these  mathematical  models  were  then  programmed  in  an 
analog  computer.  The  primary  result  was  miss  distance  and  the  sensitivity  of  miss 
distance  to  various  system  performance  parameters  was  measured. 

To  illustrate  the  development  of  the  mathematical  models  and  the  techniques  used  in 
experimental  measurements  , the  following  sections  will  cover  the  development  of  the 
math  models  of  the  homer. 

3 . 1 S i ngj  e Non-Maneuver  i nc^  T ar jje t s 

Figure  3.1-1  shows  the  three  stages  in  developing  the  mathematical  models  of  the  homer 
during  the  early  days  of  simulation.  A scenario  was  postulated  in  which  the  missile 
closes  on  the  target  in  range.  The  missile  homer's  ability  to  acquire  and  track  the 
target  were  statistically  measured  and  performance  models  developed  from  the  data. 

The  stationary  horn  was  placed  in  the  far  field  of  the  homer's  antenna,  a transponder 
connected  to  the  horn,  and  adjustments  made  to  the  signal  strengths  so  that  specific 
ranges  could  be  simulated.  The  output  of  the  homer  was  recorded,  and  the  data  analyzed. 
The  detection  probability  of  the  homer  was  then  modeled  as  a function  of  the  strength 
of  the  signal  return  from  the  transponder  to  the  homer  as  shown  in  the  figure.  In 
addition,  the  ability  of  the  homer  to  track  the  target  was  measured  as  a function  of 
range  and  a model  developed.  The  dotted  line  In  the  figure  Indicates  that  this  portion 
of  the  model  was  based  upon  other  experiments  which  measured  the  effective  angular  glint 
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Figure  3.0-  f.  Early  Simulation  Techniques  ( 1945-1965/ 





of  the  target.  This  technique  proved  to  be  adequate  as  long  as  the  target  was  relatively 
non- maneuver ing . If  the  target  maneuvered , however,  the  data  for  the  ma t hema t 1 ca 1 model 
needed  to  be  modified  as  shown  in  the  following  section. 

3.2  Maneuvering  Targets 

Early  methods  used  to  characterize  maneuvering  targets  were  very  crude  at  best.  I igure 
3.2-1  shows  how  experimental  data  was  gathered  for  this  situation.  A horn  was  mounted 
on  a boom  and  rotated  at  different  velocities.  Ihe  range  to  the  target  was  changed  by 
means  of  the  range  adjustment  shown.  for  specific  rotational  speeds  of  the  horn,  the 
tracking  error  of  the  homer  was  measured,  and  the  data  plotted  as  shown  in  the  figure. 

This  was  a crude  simulation  of  a high-G  escape  maneuver  but  did  indicate  h. w well  the 
h o m e r could  t r a c k a moving  t a r get  . 

Other  situations  Important  to  simulate  are  the  multipath  and  i lose  spaced  targets  discussed 
In  the  next  section. 

3.3  Multiple  Targets 

Figure  3.3-1  shows  an  early  day  dual  target  simulation.  The  second  target  was  simulated 
by  the  addition  of  a fixed  horn  near  the  path  of  the  moving  horn.  lhis  simulated  the 
effect  of  the  homer  closing  on  two  i lose  spaced  targets.  As  the  homer  closed  on  the 
targets  they  approach  the  angular  extent  of  the  homer's  antenna  beam  (figure  .’.3*1).  This 
effect  was  simulated  by  moving  the  targets  apart  rather  than  moving  the  homer  in  on 
the  targets.  The  specific  tracking  error  shown  in  the  plot  was  a function  of  how  fast 
the  moving  horn  moved  past  the  stationary  horn  (which  simulated  how  fast  the  homer  closed 
on  the  targets),  and  the  beamwidth  of  the  homer.  The  homer  had  a decision  to  make  when 
the  horns  approached  the  main  beamwidth  of  the  homer.  Sometimes  it  would  choose  the 
fixed  horn,  sometimes  it  would  choose  the  moving  horn  1 he  resulting  tracking  error 
then  would  depend  on  which  one  was  chosen, and  the  resulting  gyrations  of  the  homer  were 
random  and  varied  from  flight  to  flight. 

If  more  than  two  targets  were  to  be  simulated,  a technique  called  signal  injection  was 
used  which  is  shown  in  Figure  3.3-?.  The  homer  is  tracking  a moving  target  while  a signal 
generator  Injects  many  targets  or  interfering  signals  into  the  homer.  lhis  was  used  to 
measure  the  performance  of  the  homer  in  a high  signal  density  environment.  both  target 
acquisition  probability  and  tracking  error  as  functions  of  range  were  measured. 
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Early  simulation  techniques  were  characterized  by  open- loop  non -real  time  experimental 
measurements;  mathematical  models  were  developed;  from  the  experimental  data  an  analog 
computer  was  then  used  to  "fly"  scenarios,  and  miss  distance  was  computed. 

With  the  development  of  large  scale  electronically  controllable  antenna  arrays  and  an echoic 
chambers  the  situation  radically  changed  about  19b5. 

4.0  BOEING'S  TERMINAL  GUIDANCE  l A B 0 R A 1 0 K Y (TGI  ) 

Figure  4.0-1  shows  the  terminal  guidance  laboratory  (1GI)  developed  by  Boeing.  lhis 
laboratory  was  placed  in  use  in  ld67.  it  consists  of  a large  anechoic  ma t er i a l - 1 1 ned 
chamber  with  a large  electronically  steerable  target  array  at  one  end  of  the  chamber  and 
a hydraulic  table  (onto  which  the  actual  missile  homer  is  mounted)  at  the  other  end  of 
the  chamber.  There  is  a separate  shielded  room  In  which  the  Ri  and  l CM  signals  are 
generated.  These  signals  are  coupled  into  the  target  array  which  then  broadcasts  them 
to  the  missile  under  test.  The  digital  computer  controls  the  position  and  amplitude 
of  the  signals  from  the  array.  Target,  aero,  and  propulsion  models  are  also  resident 
in  the  digital  computer  i r.  addition  to  target  scenario.  Ihe  digital  computer  "flys" 
the  missile  and  the  targets  in  real-time  while  simultaneously  controlling  the  electronic 
steerable  array  which  broadcasts  the  RI  signals 

Thus,  for  the  first  time  a real-time  hardware  in- the- loop  guidance  simulation  was 
performed . 

One  of  the  key  hardware  items  in  this  simulation  is  the  electronic  sterrable  array 
which  will  be  described  next. 

4.)  1 1 ec t ron i ca  1 ly  Controllable  Array 

Figure  4.J  shows  two  views  of  the  terminal  guidance  laboratory  (TGI)  target  array.  It 
consists  of  256  antennas  mounted  on  one  foot  centers  in  a lb'  X lb'  array.  Solid  state 
switches  are  used  to  connect  the  RF  signals  to  those  antennas  -nich  are  to  broadcast 
to  the  other  end  of  the  chamber.  The  RI  signals  from  the  RI  g„  leratlon  and  l CM  equip- 
ment are  conducted  through  semi-rigid  coaxial  waveguides  to  the  Individual  antennas. 

Figure  4.1-2  shows  how  the  array  Is  programmed.  At  any  Instant  of  time  one  target  is 
broadcast  through  four  adjacent  antennas.  The  computer  uses  lookup  tables  to  determine 
the  control  signals  for  the  solid  state  switches  so  that  the  desired  A,  B,  C,  0 antennas 
radiate  the  target.  This  selection  process  provides  coarse  target  positioning  on  the 
array . 

Figure  4.1 -2(b)  shows  how  the  target  Is  positioned  within  the  quad  of  antennas.  The 
array  is  carefully  pha se-adjus ted  so  that  all  the  signals  radiating  from  the  antennas 
are  of  equal  phase  as  shown  in  the  figure.  Computer  controlled  attenuators  are  then 
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adjusted  to  control  tht»  relative  amplitude  of  the  signals  radiated  from  the  four  antennas, 
and  for  the  situation  shown  places  the  apparent  phase  center  of  the  target  in  the  center 
of  the  quad  of  antennas.  By  properly  adjusting  the  signal  amplitudes,  the  target  is 
moved  to  any  desired  position  within  the  quad  of  antennas  at  very  fast  update  rates. 

Table  4.1-1  gives  the  resulting  characteristics  of  the  array. 

The  basil,  accuracy  of  the  system  in  angular  position  is  b mllliradians  which  is  a func- 
tion of  the  spacing  of  the  antennas,  the  distance  between  the  array  and  the  homer,  and 
the  accuracy  of  the  relative  signal  amplitudes  radiated  from  the  antennas.  The  system 
can  generate  two  independent  targets  and  the  array  can  be  updated  every  two  milliseconds. 
Since  it  is  electronically  controlled,  the  target's  path  on  the  array  can  be  altered 
extremely  fast  so  there  is  actually  no  practical  limit  to  the  tar-get's  velocity  and 
maneuvering  capability.  The  target  size  is  a function  of  the  power  that  can  be  generated 
and  broadcast  from  the  array.  The  TGL  can  simulate  tar-gets  from  small  missiles  to  B-5 Z 
type  bombers,  and  can  generate  the  two  basic  types  of  t'CM  discussed  previously.  The 
frequency  coverj ge  of  the  TGI  is  from  2 to  12  GHz.  The  field  of  view  is  30  X 30  degrees. 
The  polarization  is  linearity  fixed,  but  can  be  manually  adjusted. 

4..’  Closed  loop  Real  Time  Guidance  Simulation 

figure  4 . - 1 shows  how  the  TGI  is  used  in  a closed- loop  guidance  simulation.  The 
guidance  loop  consists  of  the  following  elements:  the  target  array,  the  signals  broad- 
cast from  the  array  to  the  homer,  the  steering  signal  output  of  the  homer,  the  auto- 
pilot, the  eleven  servos  (these  two  blocks  can  either*  be  in  software  or  hardware  depen- 
ding on  the  requirements  of  the  simulation  and  the  status  of  the  hardware),  the  missile 
propulsion,  the  missile  aerodynamic s , and  the  relative  kinematics.  These  elements 
comprise  a closed-loop  real  time  hardware- in- the- loop  digital  guidance  simulation 
which  operates  from  missile  firing  through  the  fuzing  function. 

Ihis  system  was  put  together-  in  1968  and  actual  missile  hardware  brought  in  and  tested 
as  discussed  in  the  next  section. 

4.3  Si  mu  1 a t i on  V e r i f u a t ion 

Verification  of  this  type  of  simulation  was  performed  with  actual  missile  hardware 
shown  in  figure  4.3-1.  Many  tests  were  performed  including  maneuvering  tar-gets,  multiple 
targets,  fCM'ing  targets,  etc.  figure  4.3-2  shows  a comparison  between  an  actual  missile 
flight  and  a simulated  flight  for  a high-G  target  escape  maneuver.  The  top  of  the 
figure  shows  the  missile  and  target  cross-range  trajectory  profiles  in  a plan  view. 

The  profile  v i ew  shows  the  missile  and  target  elevation  t ra  jec  t or- ips  . The  situation 
depicted  is  a constant  altitude  target  which  pulls  a b.b  G escape  maneuver  6.4  seconds 
prior  to  intercept.  Typical  data  is  shown  comparing  actual  flight  test  data  to  simula- 
ted data.  The  actual  flight  test  data  Is  the  telemetered  data  from  the  missile,  and  the 
simulated  flight  test  data  is  from  the  equivalent  outputs  of  the  simulation.  Notice 
that  the  major  characteristics  of  the  simulated  flight  are  remarkably  similar  to  those 
of  the  a c t u a 1 flight. 

Another  simulation  verification  test  is  shown  in  figure  4.3-3.  The  targets  are  two 
co-altitude  aircraft  with  constant  separation.  As  the  missile  closes  on  the  target 
formation  it  has  to  make  a decision  as  to  which  target  to  choose.  In  the  actual  flight 
test,  the  missile  first  chose  one,  then  the  other  and  finally  back  to  the  first  one. 

The  simulated  data  shows  a similar*  situation  occurred.  No  two  runs  appeared  exactly  the 
same  because  of  the  dynamic  interaction  between  the  guidance  system  and  the  homer's 
target  choice.  Ihe  homer  did  not  always  choose  the  same  target.  After  several  years 
of  using  this  simulation  the  Army  decided  to  build  the  Radio  Frequency  Simulation 
System  (KISS)  which  is  discussed  in  the  next  section. 

b . 0 MIRADCOM'S  RADIO  HU  QUINCY  SIMULATION  SYSUM  {RF_$_S} 

Figure  6.0-1  shows  the  Army's  Radio  frequency  Simulation  System  (RfSS)  which  is  larger 
than  the  TGL.  It  consists  of  a larger  anechoic  chamber,  a larger  array,  and  capabilities 
beyond  those  inherent  in  Boeing's  TGL.  It  can  simulate  four  simultaneous  tar-gets  and  it 
has  an  L CM  array  embedded  within  the  normal  array  which  generates  standoff  jamming 
signals.  It  has  a large  computer  capability  and  a hydraulic  table  which  can  handle 
missile  up  to  and  including  the  latest  high  performance  missiles.  The  Rl  generation 
equipment  is  much  more  sophisticated  than  the  TGI. 

The  RfSS  is  located  in  building  S400,  in  the  Francis  d.  McMorrow  missile  laboratory  at 
Redstone  Arsenal,  Huntsville,  Alabama  as  shown  in  figure  6.0-2. 

5.1  Rf  ss  ( ha  ra c t er  1 s 1 1 c s 

Figure  6.1-1  shows  how  the  RfSS  array  components  are  mounted  on  a steel  hemispherical 
surface.  Since  there  are  four  simultaneous  targets  there  are  four  independent  Rl  paths 
for  the  targets,  and  since  it  also  employs  polarization  diversity,  each  path  is  again 
doubled  for  a total  of  8 Independent  Rf  signal  paths.  There  is  a total  of  12,000  Rf 
components  on  the  back  of  the  array,  6 34  antennas,  lb  I CM  antennas.  Table  6.1-1  gives 
the  characteristics  of  the  system.  The  target  accuracy  is  an  order  of  magnitude  better 
than  that  of  the  TGL.  It  has  the  capability  of  four  simultaneous  targets  that  can  each 
be  updated  in  one  microsecond.  The  frequency  coverage  extends  up  to  18  GHz.  The  field 
of  view  is  a 45°  solid  cone.  Polarization  is  a significant  advancement  over  the  TGL.  It 
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ot  the  signal  return  from  the  transponder  to  tne  nomer  ab  inown  m me  > «yutc. 
addition,  the  ability  of  the  homer  to  track  the  target  was  measured  as  a function  of 
range  and  a model  developed.  The  dotted  line  in  the  figure  indicates  that  this  portion 
of  the  model  was  based  upon  other  experiments  which  measured  the  effective  angular  glint 
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i:  electronically  controlled  so  that  the  target  polarization  can  be  programmed  or 
altered  during  the  course  of  the  simulation  and  therefore  polarization  diversity  can 
be  simulated. 

The  RFSS  was  designed  to  perform  real  time,  ha rdwa re- i n - 1 he- I oop  simulations  of  active, 
passive,  semiactive,  command,  beam  rider  and  track  via  missile  guidance  in  surface-to- 
air,  air-to-air,  a i r- to- surf ace  or  surface- to-surface  modes.  To  date  semiactive  and 
passive  missile  guidance  simulations  have  been  performed  and  the  first  active  seeker 
simulation  will  be  accomplished  during  the  summer  and  early  fall  of  this  year.  In  the 
active  missile  simulation,  the  seeker  will  transmit  RF  signals  through  the  anechoic 
chamber  to  the  array  where  they  will  be  received.  The  RTSS  RF  generation  system  will 
process  these  signals  and  provide  desired  target  signals  to  the  array  for  display  and 
retransmiss ion  down  the  chamber  to  the  active  seeker  mounted  on  the  three-axis  flight 
table.  The  flight  table  provides  the  dynamic  rotational  pitch,  roll  and  yaw  forces 
on  the  seeker.  The  guidance  loop  will  be  closed  through  the  autopilot  and  control 
systems  modeled  in  the  central  hybrid  computer  complex.  Open-loop  simulation  is  an 
important  tool  and  always  is  a precursor  of  closed-loop  simulation.  In  open-loop 
simulation,  the  RF  loop  is  closed  through  the  target  and  seeker,  but  the  guidance  loop 
is  open.  A static  open-loop  test  example  is  determination  of  AGC  or  doppler  tracking  loop- 
response.  An  example  of  a dynamic  open-loop  test  would  be  a seeker  head  response  test 
with  the  seeker  mounted  on  the  flight  table. 

Since  errors  (associated  with  modeling  nonlinear  processes)  and  choices  are  avoided  by 
incorporating  actual  seeker  hardware  into  the  simulation,  it  becomes  extremely  important 
that  the  RF  environment  be  *epresented  rea  1 i s t i ca  1 1 y as  the  seekers  are  stimulated  at 
their  operating  wavelengths.  The  RF  environment  is  defined  to  include  target  cross- 
section,  glint,  scintillation,  ECM,  clutter,  multipath,  and  propagation  anomalies.  Con- 
tinuous improvement  in  the  ability  of  the  RFSS  to  provide  a high  fidelity  RF  environment 
is  a priority  endeavor.  Degrees  of  freedom  required  include  when  and  where  signals 
appear  in  the  seeker  field  of  view,  frequency,  power  and  polarization  of  the  electromag- 
netic wave.  Consideration  is  given  to  high  and  low  resolution  target  modeling. 

Three  kinds  of  target  models  have  been  employed  in  the  RFSS  to  the  present  time.  The 
first  target  model  is  referred  to  as  a point  target  or  "flying  sphere"  model.  In  this 
model  the  signature  is  constant  and  appears  at  the  center  of  gravity  along  the  target 
trajectory.  The  power  level  is  modulated  only  by  range  closure.  This  model  is  often 
employed  during  the  early  stages  of  a simulation  for  integration  and  checkout  purposes 
and  is  used  to  establish  baseline  guidance  performance  data  in  a benign  environment. 

The  second  target  model  is  called  the  empirical  model  because  it  is  based  upon  measured 
data  (static  or  dynamic)  of  a scale  or  full  size  target.  The  data  are  normally  pre- 
processed  to  characterize  the  "bright  spot  wander"  of  the  target  signature  and  is  some- 
times referred  to  as  the  low  frequency  model.  Statistical  fluctuations  are  applied  to 
the  empirical  model  to  incorporate  fine  detail  or  high  frequency  characteri za t ion  of 
the  target  signature.  This  action  results  in  the  empi rical -statistical  model.  For 
example,  scintillation  might  be  represented  with  a Rayleigh  distribution  and  glint 
might  be  described  with  a Gaussian  distribution.  The  simulation  designer  is  free  to 
characterize  the  fluctuations  employing  stochastic  models  of  his  choosing  in  accordance 
with  his  insight  and  unders tanding  of  the  target  behavior. 

There  is  a strong  motivation  to  employ  deterministic  models  to  represent  RF  distributed 
sources  (time,  space,  frequency)  such  as  extended  targets,  distributed  clutter  and 
diffuse  multipath.  This  follows  from  a lack  of  a technical  consensus  concerning  the 
statistical  behavior  and  representation  of  these  elements  of  the  RF  environment.  Further- 
more, it  is  very  difficult  for  an  analyst  to  pose  a hypothesis,  design  and  conduct  an 
experiment  to  test  the  hypothesis,  and  perform  the  analysis  to  verify  or  modify  the 
hypothesis  without  the  means  to  probe  the  target  characterization  in  a deterministic, 
controlled  fashion.  The  RFSS  will  have  completed  a major  step  in  this  direction  when 
its  distributed  source  generator  (DSGS)  becomes  operational  late  this  fiscal  year. 

The  DSGS  will  permit  implementation  of  a fourth  type  of  target  model,  the  deterministic 
multiple  scatterer  target  model. 

In  this  target  model  scatterers  are  located  in  target  coordinates  and  are  assigned 
independent  gain  and  phase  values.  In  real  time,  individual  range  computations  are  made 
for  each  scatterer  and  a vectoral  combination  is  performed  by  range  resolution  cell.  This 
complex  summation  is  employed  to  control  the  generation  of  RF  signals  and  their  place- 
ment upon  the  target  array.  An  extended  target  signal  in  angle  and  range  is  therefore 
displayed  to  the  seeker  by  creating  power  density  spectra  at  the  seeker  aperture  where 
a realistic  response  will  be  provided  by  the  missile  hardware.  By  making  changes  to 
scatterer  values  and  placement,  multiple  runs  can  be  performed  to  develop  data  for 
statistical  analysis.  This  approach  allows  an  opportunity  to  gain  new  insight  into  the 
nature  and  behavior  of  a particular  target.  Significantly  also,  verification  of  this 
modeling  technique  enables  relatively  easy  development  of  models  for  other  target  types 
quickly  without  resorting  to  measurement  programs  or  overly  simplified  statistical 
models.  Comparisons  between  empirical  data  and  deterministic  data  provide  an  opportunity 
to  correlate  the  two  models. 

Model inq  of  distributed  clutter  and  diffuse  multipath  employ  similar  software  and  hardware 
techniques  as  the  deterministic  target  model.  Real  world  clutter  and  multipath  create 
asymmetrical  power  density  spectra  which  do  not  conform  to  familiar  probability  density 
functions.  Tailored  deterministic  modeling  techniques  to  provide  control  over  the  time, 
spatial  and  frequency  cha rac ter i za t i on  of  these  distributed  phenomena  such  as  those 
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described  In  the  extended  target  model  can  provide  realistic  seeker  performance  evaluation. 
This  approach  Is  more  desirable  than  the  sampling  approach  whereby  one  or  two  "tones" 
or  lines  are  generated  and  modulated  In  frequency  and  amplitude  to  determine  the  seeker 
response.  The  distributed  source  modeling  approach  is  virtually  required  for  high 
resolution  seekers. 

Simulation  in  an  electronic  warfare  environment  has  proven  to  be  an  important  application 
of  the  RFSS.  A number  of  different  jammers  have  been  incorporated  into  the  simulations 
performed  to  date.  These  have  included  denial  and  deception  jammers  under  development 
and  in  operation.  Use  of  real  jammer  hardware  functioning  in  a realistic,  dynamic 
environment  against  real  seeker  hardware  has  added  a new  degree  of  credibility  and  utility 
to  hardware- j n- the- 1 oop  simulations.  Integration  of  the  jammers  into  the  simulation  is 
easily  done.  ECM  techniques  are  quickly  developed  and  optimized;  operational  techniques 
are  quickly  verified  or  modified.  ECCM  needs  are  identified,  defined,  implemented  and 
verified  effectively  on  a quick  turnaround  basis.  Statistical  simulation  data  are 
collected  to  design  ECM  flight  tests  and  serve  as  a guide  during  the  flight  test  for 
interpretation  purposes,  flight  test  results  are  then  used  to  validate  the  simulation 
upon  proper  correlation. 

Accomplishment  of  a simulation  task  occurs  in  five  phases  of  activity.  In  sequence  the 
phases  are:  coordination  and  planning,  development,  integration  and  checkout,  simulation, 
and  documentation  and  analysis.  During  the  first  phase  agreement  is  reached  on  the  simu- 
lation requirements  and  objectives  resulting  in  definition  of  the  costs  and  schedules. 
Thereupon  development  of  the  simulation  is  initiated  where  any  required  facility  modifi- 
cations are  performed,  the  missile  and  RF  environmental  models  are  developed,  software 
is  written,  missile  hardware  interfaces  are  designed  and  fabricated,  test  plans  and 
procedures  are  prepared  and  the  hardware  systems  are  calibrated  prior  to  delivery  of 
the  missile  hardware.  Integration  of  the  missile  hardware  with  the  RFSS  subsystems  is 
then  accomplished  and  checkout  proceeds  to  verify  everything  is  operating  properly.  At 
this  point  the  simulation  is  actually  performed  and  data  are  collected.  Finally  the 
results  and  data  are  processed,  analyzed  and  documented  in  a simulation  report.  The 
level  of  effort  and  time  required  to  perform  the  development  phase  can  vary  greatly 
depending  upon  a number  of  factors.  Initial  development  of  the  missile  models  and  the 
missile  hardware  interfaces  is  a complex  and  time  consuming  effort.  Depending  upon  the 
simulation  requirements,  modifications  to  the  facility  can  be  involved.  Development  of 
new  RF  environmental  models  can  be  an  extensive  task.  Reactivation  of  a simulation  for 
additional  test  entries  is  usually  characterized  by  a greatly  reduced  development  effort 
and  schedule.  The  duration  of  the  simulation  phase  is  determined  by  the  scope  of  the 
requirements  as  defined  in  the  test  matrix. 

5 . 2 Testing  in  RFSS 

Since  it  was  dedicated  in  November  1975  there  have  been  extensive  missile  evaluations 
performed.  Some  of  the  tests  are  shown  in  Table  5.2-1.  Figure  5.2-1  shows  a missile 
in  test.  The  RFSS  has  been  used  to  evaluate  the  HAWK,  Standard  Arm,  advanced  sensors. 

Navy  systems,  foreign  systems.  In  all,  at  least  8,000  simulations  have  been  performed 
with  a cost  advantage  of  at  least  1,000  to  1. 


It  is  possible  with  this  system  to  use  the  flight  test  to  validate  the  simulation 
rather  than  vice  versa.  This  system  can  be  used  to  explore  all  the  performance 
capability  of  the  system  and  then  use  the  actual  flight  tests  to  spot  check  the 
simulation  resul ts  . 

6 . 0 NRL'S  CENTRAL  TARGET  SIMULATOR  (CTS) 


Figure  6.0-1  shows  an  artist’s  view  of  the  Central  Target  Simulator  being  developed  by 
the  Naval  Research  Lab  in  Washington,  D.C.  This  laboratory  will  be  used  to  evaluate 
EW  systems  effectiveness  in  defending  carriers  against  enemy  missiles.  The  simulator 
generates  carrier  radar  crosssection  and  EW  signals,  radiates  these  signals  to  a missile 
homer  and  in  a closed-loop  real-time  situation  evaluates  the  miss  distance  for  various 
EW  techniques. 


6 . 1 CTS  Characteristics 

This  system  has  a thousand  antennas,  and  radiates  signals  over  the  8 to  18  GHz  band.  One 
of  the  most  significant  capabilities  of  this  system  is  the  ability  to  generate  high 
power.  Several  orders  of  magnitude  higher  power  are  being  generated  in  this  system  to 
simulate  the  effects  of  the  much  larger  target  radar  crosssection  and  electronic  warfare 
signal  powers. 


Table  6.1-1  summarizes  the  general  characteristics.  The  target  accuracy  is  1 milliradian 
which  is  compatible  with  the  state-of-the-art  for  generating  these  high  powers.  The 
number  of  targets  are  28  including  ECM.  Update  rates  of  as  fast  as  1.5  microseconds  are 
provided.  Notice  that  target  sizes  show  a significant  difference  over  previous  systems. 


6.2  Tests  in  CTS 

The  Navy  plans  to  bring  their  system  on-line  in  the  1978-1980  time  period.  Initial 
testing  will  be  done  on  high  priority  EW  systems. 
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50 

OCT.  1976 

TRI-FAST  VERIFICATION 

— 

NOV.  1976 

GROUP  WORK 

2.000 

FEB.  1977 

IMPROVE  D HAWK  ECM-2 

1,000 

MAN.  1977 

BASIC  HAWK 

1,500 

MAY  1977 

WLAPON  SYSILM  DLVLL0PMLN1 

2,500 

A1I6.  1977 

IMPROVED  HAWK  LCM-3 

700 

SEPT.  1977 

IMPROVED  HAWK-AIR  FORCE 

130 

PATRIOT  ARM 

MISSILE  TESTS 

TRI-FAST 

6ENTR1C  ARM 

8,680 

TABLE  5.2-1  MISSILE  TESTS  IN  RFSS 
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TARGE!  ACCURACY 
IARGETS 
UPDAIE  RATE 
IARGET  VELOCITIES 
TARGET  MANEUVERING 
TARGET  SIZES 
ELM 

FREQUENCY  COVE  RAGE 
FIELD  OF  VIEW 

POLARIZATIONS 

TABU  6.1-1  CIS  CHARACTERISTICS 


1 MILL  I RADIAN 
28  1NCIUDING  ECM 
1.7r,  MILLISECONDS 
0 TO  MACH  SO 
0 TO  5,000  G's 
MISSILES  TO  CARRIE RS 
DENIAL,  DECEPTIVE,  CHAFF 
8 TO  18  GHz 

80  DEGREES  AZIMUTH,  20  DEGREES 
ELEVATION 

HORIZONTAL^  VI R1 1 CAL  ^CIRCULAR 


'4  ''I 


’ .0  Hot*  Iruj  ' s Millimeter  Wave  l ncja  j emen  t Simulate’  ^Mwisl 

figure  ' . 0 I shows  *t  n artist  conception  o f the  simulator  that  )\  be  mg  dry  »•  1 i>|yJ  by 
Boeing  to  operate  in  the  millimeter  region  of  the  Kf  spectrum  1 hr  I'Mmji  v intent  is 

to  evaluate  missiles  homing  against  tanks  An  e 1 ec  t ton  t v a J 1 y i on  t re  11  a b I e ,i  n .n  b»vad- 

casts  signals  to  an  actual  missile  undet  test.  Instead  e t .mi  a nee  hole  i hambei  , however, 
a metal  lined  room  will  he  used  to  reflect  all  the  ha* Aground  radiation  to  a sloping 
tri»nt.  and  thence  t o the  sky  as  a heat  sink.  1 he  missile  will  he  mounted  in  the  center 

f the  cold  spot  and  will  he  looking  at  the  array  at  the  other  end  of  the  chamber  1 he 

feasibility  model  of  this  system  was  built  h>  Boeing  In  N’t'  Some  aircraft  tests  note 
made  with  a radiometer  looking  a t land  water  areas  in  the  Puget  Sound  area.  1 he  radio 
meter  was  then  placed  in  the  simulator  and  the  array  programmed  to  simulate  the  same 
t light.  A comparison  of  the  data  is  shown  in  figure  l-l  Ivcellent  agreement  was 
obtained  thus  proving  the  feasibility  o f the  concept.  Pi.  ring  ld’8  Boeing  will  construct 
a full  s v a I e c ap  1 1 a I facility  with  the  charjctenv  t Ics  shown  in  table  11  1 he  target 

accuracy  again  will  he  in  the  order  of  1 mil  11  rad  Ian  with  up  to  100  targets.  the  array 

itself  has  an  update  rate  of  ISO  microseconds  Hie  targets  encompass  trucks,  tanks, 
lakes  and  deceptive  li‘M.  1 he  freguenc  y coverage  is  from  1 ::  to  300  OH;,  and  the  array 
will  provide  a 30  degree  field  of  vi»*w  In  addition  t o the  normal  target  signatures, 
environments  such  as  smoke,  hare,  fog,  rain  and  dust  can  he  programmed  from  the  array 
to  simulate  actual  battlefield  c o n d 1 t 1 o n s 

8.0  SUMMARY 

This  paper  has  discussed  the  development  o f Rf  homing  missile  guidance  and  controls 
simulations  starting  from  the  early  1040's  up  (>'  the  present  date  covering  the  freguencv 

range  from  to  300  0M;.  lhts  is  an  area  that  is  expanding  in  import  a rue  and  with  the 

high  cost  of  missile  flight  tests  is  proving  to  be  a very  cost  effective  method  to 
develop  now  missile  systems  The  military  agencies  are  recognizing  these  facts  and  are 
posturing  future  missile  programs  to  utilize  hardware  i n the  loop  real  time  closed-loop 
simulations  in  place  of  missile  flight  tests  to  provide  performance  data  over  a very 
wide  spectrum  of  battle  scenarios. 
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Figure  7.  h 1.  MWES  Simulation  Verification 


TARGET  ACCURACY 
TARGETS 
UPDATE  RATE 
TARGET  VELOCITIES 
TARGET  MANEUVERING 
TARGET  SIZES 
ECM 

FREQUENCY  COVERAGE 
FIELD  OF  VIEW 
POLARIZATION 
ENVIRONMENTS 


j MILLIRADIAN 

100 

150  MICROSECONDS 

0 TO  MACH  10 

0 TO  5 G's 

MORTAR,  TANKS,  LAKES 

DECEPTIVE 

lg  TQ  300  GHz 

3Q  D£6REES 

random 

SMOKE,  HAZE,  FOG,  RAIN, 

DUST,  ETC. 

TABLE  7.1-1  MWES  CHARACTERISTICS 


MISS  ION  Sl'H  l M ION  \N  V IP  li'  PIMMW  \s  ^ t > "Ml  \ I . 


1* . IU*i  K«'l  t 1' , K . A . ((ought  oil 

'•iiioi  Fug  itieer  >onior  KiigiuoiM 

Hr  1 1 » sh  Vetuspac  e 
•V  t re  t a f t (.i  .ni|> 

V*  ar  t on  P i v i s i on 
Wart  oil  Vet  oil r onu% 

I aiu  iishiro  , Plt’i  t \\ 

( n 1 1 oil  K i ugdom 


s unmui  n 

Vdvatu  «*m  in  computer  ami  display  technology  hax  e created  a situation  uhofo 
>h  .ist  n changes  in  aircraft  i orkp  t layout  are  possible. 

In  ret  ent  yea  i'-H  i most  igat  i on*  liavo  boon  umlort.iKon  at  H.\e.  at  Wart  on 
itn  oh  my;  lull  mission  simulation  in  an  advanced  cockpit  rnv  uonmoiit  . Hits 
paj'oi  d i sc  ussos  tho  |'li  i l o soph  i o s ami  methods  adopt  o>l  ami  tin*  hardware  retiuired 
t »*i  siii  It  simulation  and  also  lnduati’s  aroas  where  problems  havo  boon  fiu  ountot  nl 


1 n t i odm  t i on 

In  recent  voai’s  , on  s c dot  a (•  I «•  adxauce-  havo  boon  made  in  the  miiu.itui  i Mid  ion 
« i'm  |'u  for  s and  have  led  t o a situation  where  a 1 a rge  amount  of  inlVi  nu  T i on  could  1 • 
•node  available  to  t lie  pilot,  firstly  it  it  is  shown  to  be  useful  to  the  pilot,  an 
secondly,  it  "pa, r ran  be  provided  to  display  such  extra  information.  file 

pioxiHion  of  spare  tot  thi"  extra  mfoimat  ion  is  a major  problem  as  the  physical 

" i /e  ot  the  cockpit  i ns t rumen f a t t on  panels,  in  the  now  generat  ton  of  high  speed 
mi  l 1 1 at  \ combat  aircraft  is  tending  to  be  reduced  rather  than  increased.  1’h  i s 
reduction  in  panel  "i;e  is  particularly  evident  in  aircraft  which  have  reclining 

-eats  1 l i g • 1 ' . I'h  is  results  in  a net'll  to  re-assess  the  in  forma  t i on  t i ad  i t i ona  1 l 

displayed,  compare  its  \ a no  with  information  which  could  now  be  made  \ailable,  a 
c ons  ufet  in  wftaf  wav  t fie  tr.ufttional  cockpit  concept  can  be  modified  to 
ac  c omnuula  t e the  extra  information  in  the  reduced  area.  I’he  ground  based  research 
simulatot  provides  an  excellent  tool  for  such  invest  igat  iotis.  Firstly,  the 
s limit  at ot  enables  examination  of  potentially  dangerous  flight  conditions  in  the 
total  safety  of  the  simulatot  and,  secondly , it  a l l ow - the  use  ot  general  purpose 
'ligit.il  computet  s,  which  ot  let  gt  eat  flexibility,  and  also  the  use  of  hardware  of 
tar  less  stringent  standard  than  that  requited  fot  inflight  testing.  Hie  latter 
t e -u  l t s m c on  s i drrab  l e r i'"i  savings,  W «•  will  describe  tin*  mantle  r in  which  w e ha 
approached  this  form  of  simulation  at  Hrtti-h  Veto-pace  Wat  ton. 


l'o>pi  1 1 emetit  - ot  a "mini  at  ton  for  the  purpose  of  Display-  Vssess  ment 

In  ordi’t  to  enable  a successful  assessment  t »>  be  matte  the  sinutlat  i i'ti  must 
perform  certain  functions.  Hasically  it  must  create  a representative  environment 
whether  it  be  a low- lex*' l atta.k  situation  or  a high  altitude  combat  engagement. 
In  oi'ilet  t i'  achieve  this  it  is  necessary  to  have  : - 

Handling  and  pet  formative  char.ict  erist  ics  appropriate  t o the  type  of  aircraft 
undet  c onsiderat ion. 

Ken l i stic  cockpit  geometry. 

and  a resulting  realistic  level  of  pilot  work  load. 

Having  obtained  a represent i ve  env i ronmiMit  . provision  must  be  made  for 
examination  of  the  displays  with  regard  to  t he  following:- 

Physical  positions  of  the  displays  within  the  cockpit. 

Fuse  of  interaction  between  the  pilot  and  the  display. 

- Display  content. 

- Method  of  presentation. 

- Interaction  between  displays 

anti  the  effect  of  a display  on  the  pilots  performance. 


\ h w «•  .it  e i oiurriifil  with  basiv  re*rt»ri'h  w«*  are  i n manv  inst  ,ui>  i-s  taking  a lir.-t 
look  at  new  concepts,  some  %•  i 1 1 show  promise  others  will  not.  It  i>  therefore 

e ssent  i a 1 to  approach  such  a sse  s smeu  t - in  .is  flexible  a inatuiet  as  puss  i Mr,  l> « • i tig 

pi  <‘p.ii  imI  t o change  hit  t h thf  <1  i re*.  t 1 on  it  1 t lit*  invest  igat  inns  and/or  tin*  t \ pe  - o t 
tli  "f  l .iv  until'  i asst1  swine  tit  , as  a i « • ^ 1 1 1 t o t initial  testing.  With  this  in  mitul  it  is 
desirable  to  use  high  speed  genet  a I purpose  , <1  i g l t a 1 i oinpu  tens  where  vet  pt'ai' t leal  , ai 

provide  software  in  a high  level  language  whetifvet  change-  at  «•  thought  lik«*lv. 

I'h  l s enables  software  mod l I i c a t i on  with  mini  mum  tie  las  s . 

While  wishing  to  li.tvr  I l «*\  l h i I i t \ we  mu  s t iiit'Vit.iMv  impose  some  restrictions 
upon  ourselves.  It  tan  he  i emp  t i rig  t o e ons  t rut  t a * omp  I e t o 1 v new  i ovkpi  t totally 
reliant  on  elevti'onn  d i sp  1 a>  s hut  this  hold  step  may  well  lead  to  a situation  where, 
v an  se  and  e f fee  t tan  no  l onge  t he  i eadi  h identified  hec  an  se  o t the  inline  i on  s 
possibilities  whit  li  are  present.  \ I in  t he  i po-s  i h i I i t \ is  that  pilots  lieeome  over- 
whelmed b v the  number  o t new  tomepts  t on  t t out  I n g t hem  , and  | ■ i l o t alienation  may 

I e Ml  1 t . It  appear  s fai  mol  e t e.,  onah  l e t o t oils  i del  a step  b\  step  appro.it  h h\  which 

p i 1 t)  t n ai  e l nt  »*  odue  etl  t e the  change  1 t . m <le.  I iometh.iiiie.il  nisi  t union  t s to  t o t a l I y 

electronic  displays  in  . et  tain  areas  ot  the  , oc  kpu  . while  retaining  t r ad  i t i on  a I 
i ns  t i union  t s in  the  i emu  1 tide  r . I \ p i v a I 1 \ this  would  result  in  lade  living  insti  umeii  t 
being  une  hanged  , while  systems  information  f . - ■ eng  i nes/l  uel/nav  i gat  i on  . and  weapons 
at  e presented  e 1 oef  (on  i e a l J > , It  v.u  leu-  me  t hod  s . 

H.tv  i ng  imposeil  this  iestti>tiou  it  wmil.l  appeat  prudent  to  restrict  the 
dimensions  of  the  now  e oc  k j • i t t . that  . t an  ••  \ i - t mg  a 1 1 1 tame  so  that  t ho  natural 
progression  t rom  s i mu  lat  ion  to  lull  i .(light  testing  can  he  achieved  more*  read  i 1 \ . 

Iho  choice  ot  suitable  s»il  |.  . | s is  import  ant.  I de.i  1 l \ w «•  require  pilots  who  at* 

currently  living  the  par  t i c u l at  am  i .il  t chosen  I ><i  the  simulation  and  who  are 
profit  ient  in  tin*  operat  » on  ot  any  actual  am  i alt  hardware,  such  as  head  up 
displays,  or  nav  igat  ion  svst  ems  which  an*  m*  l udod . la  i lure  t o obtain  such  sub  .I*'*'  t s 

leads  » *»  i'Xi  oxsiveh  long  f am  i l i ar  i sa  t i on  p**r  i od  s being  nec  e s s.»  r\  pr  i ot  to 

unde  i t ak  i ng  the  i n t ernh'd  display  asses  smeu  t - . hiving  clothing  is  a 1 so  impoi  t anf\ 

This  is  general  l v cumliersonn*  hut  must  he  worn  it  a realistic  on\  i rotimeut  i»  t o he 
reel eated.  and  it  assessments  of  display  management  are  to  he  meaningful.  Possibly 
the  most  important  factor  in  relation  to  the  subjects  is  that  the  simulation  engineet 
must  develop  a s in'  c-  e s ••  f u l rapport  he*tween  himself  and  tin*  subjects,  o as  to  emcnir.ij 
the  subject  to  become  actively  involved  in  the  experiment,  rather  than  merely 
performing  set  tasks  t o order.  Comment,  critic' ism  and  suggestions  should  hi* 
s.  • l i c i t I'd  at  all  times  and  carefully  c ons  t rue  t ed  questionnaires  can  provide  an  ideal 

basis  for  t h i s . ft  is  part  ivular  tv  c onvenient  f o ha  v «•  fwe  subjects  available  at  tin* 

same  time  since  this  allows  each  pilot  to  rest  between  missions  without  loss  ot 
smml.it  oi  utilisation.  Subject  s should  to*  prevented  from  forming  preconceptions 
about  tin*  expei iment  by  restricting  the  amount  of  information  available  before  the 
official  briefing  to  a minimum. 

Present  at  i on  of  the  briefing  material  in  written  form  ensures  as  far  as 
possible  that  each  pilot  i e.  fives  an  identical  brief.  During  any  verbal  briefing  it 
is  important  that  the  engineer  involved  avoids  any  temptation  to  express  his  own 
opinions  on  topics  intended  t o»  assessment . 

iatfil  with  the  brief  is  a per  i od  of  fami  I iat  isat  i on  with  both  the 
simulation  and  the  display*-.  Half  a dav  could  be  sufficient  in  some  cases  although 
this  time  must  be  extended  if  required  in  order  that  the  effect  of  the  learning 
process  on  experimental  results  is  minimised. 

Typically  a program  for  display  assessment s could  he  made  up  of  the 
following  phases: 

1.  Initial  definition  during  which  time  types  of  display,  sizes  of  display, 
display  content  and  scenarios  are  established.  I h months) . 

2.  A Build  program  during  which  the  integrated  simulation  is  constructed 
l •)  months! 

1.  ' set  ies  of  Shakedown  Kxperiments  using  test  pilots  from  both  the  company 

and  the  armed  fiii'ces  (2  months)  , 

» . \ modification  period  during  which  shortcomings  identified  in  the 

shakedown  experiments  are  eliminated  12  months!. 

• A formal  experiment  using  front  line  Squadron  pilots.  I!  months!, 
b . ' reporting  and  presentation  phase  (2  months!. 


Simula!  ion  I'echiiigues  |Hi  a Port  uulai  Appl  it  at  ion 


:.s  -.1 


Having  r.Htal)|  i»liiMl  our  requirements  and  tin*  philosophy  with 
wo  air  now  in  a posit  ion  to  consider  a detailed  breakdown  of  the 
us  assume  the  lol  lowing  scenario  which  m i y;h  t apply  t o any  typica 
Kig  2. 


which  to  meet  them 
s i mu  1 a t i on . Le t 
I low-level  strike  mission 


Start  ing  conditions  - over  base  ,*‘>t)  knot  s/*>0()  feet  . 


Follow  U.l'.l).  director  to  the  first  waypoint  which  is  still  within  friendly 
t err i t or y . 


- Check  posit i on  as  required  on  the  navigat ion  displays. 

Check  fuel  state  and  engine  parameters  on  appropriate  displays. 

Approaching  first  waypoint  - check  navigat ion  system  for  drift  and  update 
with  correct  posit  ion  data  if  required. 

Confirm  sat  isfactory  t i tiling  and  proceed  t *>  next  waypoint  accelerating  t o *5  SO 
knots  and  set  t 1 i tig  to  200  feet  as  the  FKHA  is  crossed. 

The  waypoint  is  a target , so  arm  the  weapons  system  and  select  a suitable 
weapon  delivery  display  on  the  111)1). 

l>eliver  the  weapons  and  make  the  remaining  weapons  safe. 

- Carry  out  attacks  on  the  two  subsequent  waypoints  using  appropriate  weapon 
de  1 i very  IH'D  modes. 

Having  completed  the  host ile  phase  of  the  mission: 

Hot  urn  to  friendly  territory  crossing  the  FKHA  at  the  correct  position  and  time. 
Oec  ell  era  t e to  *>t>  knots  ami  take  a navigation  fix  on  the  next  waypoint. 

Hpdate  the  system  if  necessary. 

Ret  urn  to  base  after  making  the  weapons  system  safe. 

- Mission  etuis  over  base. 

Probably  the  largest  division  which  has  to  he  resolved  is  that  between  hardware 
and  software.  It  has  already  been  mentioned  that  flexibility  must  be  maintained  in 
cei  tain  areas  and  this  impl  it's  software.  Indeed  in  our  experience,  it  requires 
high  level  software  written  in  a language  such  as  FORTRAN  it'  rapid  and  reliable  changes 
art*  to  be  effected  during  the  development  phase.  If  is  equally  as  important  to  avoid 
a software  overhead  which  could  ho  resolved  w i t fi  hardware  whilst  taking  into  account 
any  sof t waie/hanlware  interfacing  which  may  be  required.  based  on  the  above  mission 
definition,  tin*  tasks  allocated  to  software  could  therefore  consist  of: 


1.  Head  down  display  general  ion 

2.  flu*  aircraft  simulation  including  engine  performance  and  fuel  consumption. 

1 . Navigation  calculations. 

• . Weapons  system  c output  at  ions. 

The  remaining  reqii  i i emenf  n listed  below  are  largely  met  by  dedicated  hardware. 

1.  Cockpit  instrumentation. 

2.  Outside  world  display 

’).  Head-up  display  symbology  generation. 


It  is  clear  that  the  software  listed  above  could  post*  problems  of  compatibility 
such  as  update  rate  and  C.l'.b.  requirements  if  an  attempt  was  made  to  run  it  in  a 
single  large  processor.  A more  satisfactory  solution  is  ( o employ  more  than  one 
small  processor  which  can  he  allocated  each  to  its  specific  task.  Sub  division  of 
software  in  this  way  also  has  advantages  in  program  development  and  testing  aspect^.*.  *• 


A final  point  In  considei 
of  data  transfer  between  proci 


when  optimising  software  distribution  jpw^lie 
smuts  associated  with  each  corit'igur^^  ion. 


quant  i t v 


l.et  us  now  consider  each  of  the  software  tasks  in  turn: 


Head  Uown  Hi. ««play  t»«-m  i at  ioti 


oti  1 cl  l>»*  one  of  the  following. 


1.  System  Management  displays  - these  will  be  manually  selectable  and  can  vary  in 
form  from  a simple  system  status  presentation  to  a detailed  subsystem  analysis 
of  the  form  necessary  in  the  event  of  a systems  malfunction.  These  displays 
are  likely  to  be  both  alphanumeric  and  graphical  it*,  form. 

2.  Navigational  displays  - these  can  range  from  simple  stylised  moving  map  display? 
to  complex  mission  overviews  overlayed  with  current  status  related  t o points 
within  tin*  mission  profile. 

To  exercise  subselections  ot  the  system  management  displays  it  is  necessary  to 
include  software  for  the  simulation  of  non-cat ast rophic  malfunctions  during  the 


Aircraft  S i inn  lat  i on 


simulation  covering  a 
i ire  raft  manoeuvres  ei 


oiis  i derab  1 e 


A re-appraisal  of  the  mission  definition  implies  the  requirement  for  .in  aircraft 
simulation  covering  a considerable  rest*  icted  flight  envelope.  Also  the  limited 
aircraft  manoeuvres  encountered  in  such  a mission  as  this  allow  the  use  of  a simplil i ed 
set  of  equations  of  motion.  Both  these  considerations  alleviate  to  a large  degree 
tin*  software  effort  needed  to  achieve  an  adequate  aircraft  representation. 


Navigat  ion  t'alculat  inns  and  Weapon  System  Computation 


These  are  closely  allied  and  genet  ally  favour  inclusion  within  the  same 
processor.  Calculations  performed  here  have  out  lets  in  .»  number  ot  other  ureas 
not  ab I y : 

- Navigat ion  display  and  weapons  management  displays  which  have  alt eadv  been 

men  t i oned . 

The  head  up  display  in  both  navigation  and  weapon  delivery  modes. 

The  outside  world  display  for  feature  represent  at i on  on  tin*  ground. 

facilities  can  be  included  within  this  software  for  simulating  drift  within  the 
navigation  system  and  its  removal  by  manual  updates. 

A typical  hardware  committment  to  meet  these  requirements  is  shown  in  I ig  1. 

The  items  can  be  grouped  into  four  main  units  which  me  detailed  as  follows:- 


IM)P  1*5/76  Unichannel  min-computer  with 
a ) 32K  words  core,  20  A/P  converters  and  32  P/A  converters, 

h)  PPPl  1/0*5  with  2 disk  drives  and  Bk  local  memory, 

c)  VPl*>  Storage  display  and  interface. 

The  PUP  11/0*5  shares  memory  with  the  PPP 1 and  performs  peripheral  processing  thus 
freeing  tin*  PDPlr>  for  user  computations  which  are  specifically  navigation  and  weapon 
aiming  calculations  as  well  as  parameter  calculations  for  supplying  two  displays 
generated  elsewhere.  The  Storage  display  is  used  for  plotting  mission  parameters 
e.g.  fuel  usage  as  a function  of  t inn*  into  the  mission  for  comparison  on  the  same 
set  of  axes  with  the  predicted  parameter  behaviour.  The  display  is  directetl  to  a scan 
converter  for  conversion  from  a cursive  signal  to  a raster  video  signal  suitat  1 e for 
introduction  into  tin*  video  mixer/switcher. 


Tliis  consists  of  identical  hardware  to  Unit  1 but  its  main  function  is  the 
simulation  of  the  aircraft  equat  ions  of  motion  and  generation  of  analogue  signals 
for  driving  cockpit  flying  instrumentation.  Interprocessor  communication  is  provided 
by  a digital  link  between  units  l and  2.  The  PI>Pl*5  also  produces  analogue  outputs 
suitable  for  driving  the  outside  world  display.  This  display  is  a self-contained 
computer  generated,  six  degrees  of  freedom  synthetic  terrain  generator  which  produces 
a display  shown  typically  in  fig  'l  and  consists  of  a matrix  of  200  feet  square 
coloured  fields.  At  appropriate  times,  conspicuously  coloured  squares  are  introduced 
onto  the  terrain  to  coincide  with  targets  or  waypoint  emergence  as  required.  The 
synthetic  terrain  is  presented  to  the  pilot  via  a suitably  collimated  colour  monitor 
situated  in  the  cockpit. 


Pl>P-‘)  min  i -c  output  er  system  with  l<»k  words  of  memory  and  2 fi  A/l>  converters.  Th  i • 
machine  is  interfaced  to  a cursive  refresh  display  system  and  is  used  for  drawing 
the  stylised  moving  map  (fig  r» ) as  well  as  all  other  dynamically  updated  displays  as 
and  when  required.  This  cursive  output  is  also  converted  to  a raster  signal  via  a 
scan  converter  and  fed  to  the  mixer/sw  i teller  • 


Unit  '«  is  the  se  nse/c  out  rol  i nt  erf.ic  e which  is  ill  ivrn  from  Unit  I providing 
tigit.il  nitiM'lV.c  ing  throughout  t hr  system  ,» s follows:- 

[i . Demote  HUD  mode  schn’t  ion  us  required  e.g*  for  automatic  switching  from  "general 

uavigat  ion"  moil**  to  "c  lose  uavigat  ion”  mode  .is  u waypoint  is  approached . 

This  typo  of  switching  descrete  is  required  since  t h»*  HUD  is  an  aircraft  unit 
which  has  to  he  driven  via  its  airborne  interface. 

b.  All  cockpit  switch  and  button  se lections  including  weapons  selections,  weapon 
releases,  pilot  display  modi*  selection,  switching  sequences  for  failure  rectification 
navigation  control  unit  selections  and  manual  head-up  display  selections. 

c.  Demote  video  signal  switching  as  required  for  display  on  the  cockpit  head-down 
monitor.  Switching  is  required  since  video  signals  from  more  than  one  source 
were  available  for  this  monitor. 

Hie  remainder  of  tin*  equipment  consists  largely  of  laboratory  monitors  to  enable 
the  personnel  coiuliu  ting  tlie  experiment  to  remain  informed  as  to  the  status  of  the 
mission  and  aircraft.  These  displays  are  repeaters  of  the  cockpit  head-down  display, 
the  outside  world  display  and  tin*  head-up  display. 

I n the  particular  experiment  described  here,  two  cockpits  were  available  one  of 
which  had  a convent ional  cockpit  fit  typical  of  a current  fighter  aircraft  while  tin* 
other  was  fitted  with  tin*  displays  layout  described  previously.  Kither  could  be 
linked  t o the  computer  system  enabling  piloting  assessment  to  be  made  of  a conventional 
cockpit  vs  an  advanced  displavs  cockpit  in  quick  succession.  This  was  a very  desirable 
s i t u. 1 1 . on  . 


Da  t a \*  qn  i s i t i on 

In  this  type  of  experiment  there  art1  two  main  sources  of  measurement  : numerical 
data  and  pilot  opinion.  With  the  advent  of  the  digital  computer,  numerical  data  has 
become  easy  t **  obtain  and  easy  t **  submit  to  detailed  numerical  analysis  t echn  i qiies . 

I'h  is  has  had  an  unfortunate  effect  in  that  before  the  digital  computer  era,  recording 
was  expensive  and  engineers  were  severely  restricted  in  tin*  number  of  variables  which 
could  be  recorded.  Hus  led  t o verv  careful  thought  as  to  < lie  most  important  quantities 
to  store.  Nowadays  it  is  all  Ion  easy  to  store  vast  quantities  of  results  from  which, 
mil  nrtun.it  el  v in  many  instances,  very  few  if  any  conclusions  can  be  drawn.  In  our 
experience  t lie  types  ot  numerical  data  worth  recording  fall  into  two  categories. 

Firstly,  data  which  gives  a clear  cut  measure  of  pilot  performance  under  comparative 
conditions  - this  might  be  the  arcuracv  of  weapon  delivery  with  differing  weapons 
displays  and  control  laws,  or  tin*  navigational  accuracy  with  similarly  varying  display 
.lids.  The  second  form  of  data  is  that  which  relates  pilot  selections  and  operations 
to  other  mission  events  on  a t ime  basis.  Typically  this  involves  monitoring  time 
keeping  in  relation  t o est  im.it  ed  t intes  of  arrival  at  waypoints  and  target  areas  and 
a l so  checking  whether  or  not  system  select  ions  are  correct  ly  made  a t various  stages 
ot  the  mission,  since  it  is  tut  it**  carrying  out  an  excellent  attack  profile  if  you 
forget  to  select  tin*  I A IK  AHM  switch  t o ON.  A typical  data  set  of  this  form  is  shown 
i u (fig  b l • 

Pilot  opinion  may  we  I I be  the  best  sou  rce  of  informal  ion  in  these  types  ot' 
assessment  but  the  col  loci  ion  of  such  opinion  requires  careful  planning.  In  our 
experience  quest  i otttin  i re  methods  have  proven  successful  and  it  is  appropriate  t o 
explain  our  approach  t o using  such  techniques. 

In  order  to  obtain  a comprehensive  questionnaire  we  first  identify  those  areas 
of  tin*  cockpit  displays  on  which  we  w i sli  to  concentrate  and  allocate  a separate  section 
within  the  questionnaire  t o each  topic.  Within  each  subdivision  detailed  questions 
are  constructed.  Care  is  taken  t o ensure  that  quest  ions  are  non  ambiguous,  do  not 
tent  to  bias  the  answer,  and  are  presented  in  a logical  progression.  For  example  do 
not  ask  whether  a display  is  "noisy" , .is  you  may  get  an  answer  relat ing  to  loudness 
or  the  level  of  interference,  also,  do  not  ask  for  comments  on  display  conet  out 
before  you  have  established  whether  or  not  the  pilot  can  see  the  display.  A further 
essential  is  tlie  provision  of  space,  adjacent  to  each  question,  for  the  pilot  t o add 
comments.  II. tv  ing  constructed  tin*  quest  ionnnirc  it  should  he  used  during  tin*  shakedown 
experiment  so  that  possible  trouble  areas  can  be  identified  and  eliminated. 

In  this  type  of  assessment  it  is  advautngeoun  to  present  the  quest ionnnire 
during  the  initial  briefing  for  tin*  experiment,  as  this  allows  the  subject  to  identify 
tin*  topics  on  which  the  questionnaire  is  based.  It  is  preferable  to  .i  I I ow  the  subject 
t o complete  the  quest  i otin.i  i re  unaccompanied  and  then  have  a debt*  i ef'i  tig  so  that  tin* 
subject  can  clarify  arty  queries  relating  t »»  tin*  questions,  and  the  engineer  can  ensure 
that  he  tinder  st  amis  the  answers.  The  following  examples  demons!  rat  e tin*  need  for  such 
debt'  ief  i tig • 


.*  ''  .*  * 


Que  s I i on  l . 


Piil  you  find  opcr.it  ion  ot  llifsi 
Aii'  t‘iit  utile  •'  ot  Kasy  •' 


>1  7-ill  oil  t t oil*  Pitt  I l II  I t 


Answer  1 • Pi  ft’  leu  1 t 

Comment  "lining  small  I had  it  I ffi  cu  I t y" 

Is  this  a comment  on  pilot  stature  or  Put  ton  si  ye  7 
Quest  ion  2.  W <t s the  si  ye  of  the  display  Too  Large.’  M'out  Wight  oi  loo  Small 

Answer  2 I’oo  Large. 

Additional  question.  How  large  should  the  display  tie.’ 

A dil it  ional  answer.  As  large  as  possible  1 1 1 

One  final  important  apsec  t ot'  presenting  a questionnaire  is  to  gnat  ant  oe  m 
of  tin*  subject's  identity  when  presenting  results,  an  assurance  which  in  mans 
circumstances  allows  more  freedom  ot  expression  to  the  part  ic  ipaiit  s. 


Pi  sins  si  on  of  Itesnlts 

1.  Simulations  of  the  form  desci i bed  have  enabled  useful  assessments 
of  new  display  concepts,  display  contents,  display  management  and 


Where  c otnpar  i son  ot  two  standards  of  cockpit  i 
have  both  types  of  cockpit  available  at  the  sa 
but  tin*  advantages  are  cons idcrabl e . If  one  c 
different  equipment  tits,  it  implies  ,in  intcrv 
cockpits  of  possibly  several  months.  I'h  i s is 
it  is  unreasonable  to  expect  a pilot  to  make  a 
flights  under  varying  conditions  which  take  pi 


cockpit  is  required,  it  is  des 
at  tin*  same  t inn*.  (fils  mav  ap 
It  one  cockpit  is  t o he  mod i f 
an  interval  between  assessment 
fills  is  undesirable  on  two  c 
to  make  a comparison  between  s 
h take  place  months  apart  . Si* 


our  experience  that  from  a programme  management  aspect  it  is  easier 
subjects  for  a single  period  of  several  cousecut ive  days  than  to  ob 
subject  on  a .series  of  dav.s  a t large  intervals.  With  two  cockpits 
mission  can  be  flown  in  both  types  *»f  cockpits  with  a delay  determi 
tin*  need  foi  the  pilot  to  rest  between  "flights",  and  the  quest  lonn, 
can  be  completed  while  the  del  a i I of  each  option  is  fresh  in  the  pi 


0 be  made 

or  kp l t I ay  on 

1 ral*  I e to 

pi* a i exl  l ava 
i i*d  to  two 
s ot  the  two 
minis.  I i r s 
i mu  I a t eil 
c Olid  , it  is 
t o obt  a i n 
tain  a g l \ en 
the  same 
ni*d  only  b\ 
a i re 

lots  m i ud . 


Hecisions  on  t hi*  inclusion  of  ac  t ua  1 aircraft  hardware  must  be  made  with  care. 

I n one  experiment,  we  included  two  main  items:  the  Navigation  font  rol  l nit,  and 
the  Head  lip  I'isplav,  anil  derided  to  replace  the  Moving  Map  Hisplav  l»v  a simul.it 
map.  I'hi*  Head  l'p  Hisplav  proved  to  be  total  In  satisfactory  while  the  remaining 
two  items  presented  problems  of  a differing  nature.  fhe  Navigation  tout rol 
I'n  i t , while  totally  without  c r i t i c i sin  from  the  pilot,  proved  expensive  to 
interface  both  from  complexity  of  romput.it  ion  and  manpower  required  to  carrx 
out  tin*  interface.  In  the  event  a much  simpler  stylised  simulated  unit  could 
have  been  substituted  (and  will  be  in  future  work).  Ihe  reverse  type  of 
decision  was  taken  in  relation  to  the  provision  of  a Moving  Map.  \ simulated 
moving  map,  elect  ronical  ly  generated  on  a raster  monitor  was  substituted  foi  th 
actual  aircraft  hardware.  file  degree  of  complexity  of  informal  ion  provided 
on  the  simulated  map  was  restricted  by  computer  speed,  core  si/e  amt  lack  of  a 
small  colour  monitor.  fhe*  lack  of  detail  resulted  in  tinaii  i limits  c ri  t i c i sin  bv  a I 
participating  pilots,  and  therefore  for  future  investigations  we  have  to  cons  id 
whether  to  install  the  actual  ha rdwa le-w i t h considerable  interface  problems  - o 
invest  in  a complex  electronic  colour  graphics  system  to  create  a real i st ii  map 

fhe  use  of  a synthetic  electronically  generated  outside  world  proved 
acceptable  for  this  type  of  simulation,  particularly  as  the  mission  was  under 
flight  director  control. 

Comment  was  received  to  the  effect  that  the  display  had  some  shor t c om i ng s , in 

par t leu 1 nr : 

flat  fields  - resulting  in  an  easier  height  control  task  than  in  real  life, 
consistently  good  weather  conditions, 
very  obvious  targets  and  waypoints. 

fhe  first  of  these  comments  relating  to  height  keeping  is  uudouhtedlx  l i ue  but 
the  pilots  task  was  to  some  extent  increased  by  the  fact  that  flight  director 
error  signal  was  recorded  as  a measure  of  flying  accuracy.  twather  conditions 
could  he  varied  hut  only  in  terms  of  cloud  base  and  visihilitv  and  these  once 
set  were  constant  for  a mission.  file  third  point  - ver\  obvious  target-  was 
intentional,  since  we  did  not  wi-di  to  ge  t involved  in  tin*  argument  s relating  to 
target  recognition  which  we  hove  previous  In  experienced. 


Si  mil  l at  i on  of  failures  has  not  boon  as  sui^  osnIuI  .is  hopod  for  I'lu*  m,i  i n 
problem  boro  is  one  of  i re.it  in^  tin*  'life'  anil  death'  .1 1 mospliore  of  1 li «> 
inflight  situation,  in  a fixed  base  simulator.  In  ^ouei  ul  our  pol  ik  v has 
i>t  inserting  rolativoly  simple  failures  which,  while  not  leopard  i s i ng  the 
have  noc  oss  i t «i  t oil  tin*  use  of  the  displays  under  assessment  . file  failures 
been  inserted  at  points  in  the  mission  having  different  workload  levels. 

It  has  been  found  that  while  in  conditions  of  1 ow  workload,  the  pilot  woul 
out  the  correct  procedures.  In  condit ions  of  high  work  load,  the  pilots, 
perhaps  aware  of  the  safety  of  the  simulator,  would  leave  the  fault  util  il 
immediate  task  such  as  weapon  delivery  had  been  completed. 


m 1 ss 1 on , 
hnv  e 


To  date,  the  answer  t o this  problem  has  not  been  found,  but  as  investigations 
move  towards  cockpits  with  totally  electronic  displays,  on  a very  limited  number 
of  display  surfaces,  it  is  likely  that  in  the  event  of  a failure  occurring,  the 
information  re  lilting  t o the  failure  will  be  an  t 0111  a t ic  a l 1 v overwritten  on  a 
particular  multi  modeil  display  resulting  in  the  loss  of  the  previously  selected 
information  and  thereby  preventing  tin*  pilot  from  ignoring  the  failure  - even  in 
t he  s iimt  1 .1 1 or  • 

bight  omitting  diodes  are  becoming  popular  in  new  cockpit  display  concepts, 

I l‘l>  technology  having  reached  <1  state  where  more  or  less  till  colours  are  available, 
although  in  order  to  obtain  the  necessary  brightness  levels  for  some  colours, 
overheating  problems  must  be  resolved.  Uiven  the  need  to  simulate  such  a display, 
the  construction  of  an  I..F.I).  panel  can  be  readily  undertaken.  However,  once 
fabricated,  the  display  format  cannot  be  readily  varied.  If  the  assessment 
is  concerned  with  the  display  content  and  concept,  as  is  our  case,  then  it  should 
be  considered  whether  it  is  bet  lei  t o simulate  the  I .F.l>.  display  by  mentis  of  a 
general  purpose  colour  c.r.t.  display  thereby  allowing  pre-storage  of  various 
formats  w i t h on-line  selection  capability. 

One  quest  ion  inevitably  asked  in  this  form  of  experiment  is  "how  does  the  workload 
content  of  the  simulator  mission  compare  with  that  of  the  real  world  in-flight 
situation?"  It  is  our  experience  that  quantitative  measures  are  difficult  t o 
obtain  since  the  only  methods  generally  considered  to  be  consistently  reliable 
are  of  a bio-medical  nature  and  are  likely  to  alienate  the  subject  if  not  the 
eng ineer • 

Finally  it  must  be  emphasised  that  conclusions  drawn  from  this  type  of  simulation 
relate  only  to  human  factors  aspects  and  engi  tieer  i ng  aspects  require  separate 
s t udv • 
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